#okta-sso-phishing
#okta-sso-phishing
[ follow ]
#cybersecurity #phishing #malware #security #identity-management #vulnerabilities #oauth #microsoft-365 #data-breach
#phishing
Information security
fromTheregister
1 week agoHundreds compromised daily in Microsoft device code phishes
A Microsoft device-code phishing campaign is compromising hundreds of organizations daily, utilizing AI and automation to steal financial data.
Information security
fromTechzine Global
2 weeks agoMajor phishing campaign on GitHub using fake security alerts
A large-scale phishing campaign targets developers on GitHub, exploiting Discussions to spread fake security alerts about Visual Studio Code and distribute malware.
Information security
fromTechRepublic
2 weeks agoMicrosoft 365 Under Siege: Phishing Campaign Bypasses MFA Across 5 Countries
A sophisticated phishing campaign exploiting Microsoft 365 accounts has affected over 340 organizations across five countries using a legitimate OAuth feature.
#microsoft
Information security
fromSecurityWeek
11 hours agoMicrosoft Patches Exploited SharePoint Zero-Day and 160 Other Vulnerabilities
Microsoft's Patch Tuesday updates address 165 vulnerabilities, including a critical SharePoint zero-day exploit tracked as CVE-2026-32201.
fromSecurityWeek
4 days agoMITRE Releases Fight Fraud Framework
"These incidents involve the intentional use of deceptive or illegal practices to fraudulently obtain money, assets, or information from individuals or institutions, and include actions carried out over cyber channels."
Information security
fromArs Technica
2 months agoMillions of people imperiled through sign-in links sent by SMS
The links are sent to people seeking a range of services, including those offering insurance quotes, job listings, and referrals for pet sitters and tutors. To eliminate the hassle of collecting usernames and passwords-and for users to create and enter them-many such services instead require users to provide a cell phone number when signing up for an account. The services then send authentication links or passcodes by SMS when the users want to log in.
Privacy technologies
#ai-agent-security
Information security
fromTechzine Global
4 weeks agoOkta launches platform to secure AI agents
Okta for AI Agents provides organizations with discovery, access management, and immediate revocation capabilities to secure non-human identities and address the 88 percent of organizations experiencing AI agent security incidents.
fromSecuritymagazine
4 weeks agoTargeted Phishing Attack Breaches Biotech Company Data
This phishing attack enabled the threat actor to access 'certain internal IT business applications.' The malicious actor gained unauthorized entry by compromising an employee's access to the organization's internal network for business administration.
Information security
Information security
fromTechRepublic
1 month agoHackers Pose as IT Staff in Microsoft Teams to Install Malware
Attackers impersonate Microsoft Teams and IT personnel to deliver A0Backdoor malware through malicious MSI installers, using social engineering and DLL sideloading techniques to establish persistent network access.
Information security
fromTheregister
1 month agoMicrosoft OAuth scams abuse redirects for malware delivery
Microsoft warns of ongoing OAuth abuse scams using phishing emails and URL redirects to deliver malware and compromise organizational devices, primarily targeting government and public-sector entities.
Information security
fromThe Hacker News
1 month agoMicrosoft Warns OAuth Redirect Abuse Delivers Malware to Government Targets
Microsoft warns of phishing campaigns exploiting OAuth redirect mechanisms to bypass email and browser defenses, targeting government and public-sector organizations to deliver malware without stealing credentials.
fromComputerworld
2 months ago11 steps to smarter Google account security
While you're thinking about third-party add-ons for your computer and phone, take a moment to review everything you have installed on both fronts and consider how many of those programs you actually still use. The fewer cracked windows you allow on your Google account, the better - and if you aren't even using something, there's no reason to keep it connected.
Information security
fromThe Hacker News
2 months agoPassword Reuse in Disguise: An Often-Missed Risky Workaround
Near-identical password reuse occurs when users make small, predictable changes to an existing password rather than creating a completely new one. While these changes satisfy formal password rules, they do little to reduce real-world exposure. Here are some classic examples: Adding or changing a number Summer2023! → Summer2024! Appending a character Swapping symbols or capitalization Welcome! → Welcome? AdminPass → adminpass Another common scenario occurs when organizations issue a standard starter password to new employees, and instead of replacing it entirely, users make incremental changes over time to remain compliant.
Information security
Information security
fromSecurityWeek
2 months agoWebinar Today: Identity Under Attack - Strengthen Your Identity Defenses
Adopt an identity-first security strategy to protect sensitive data, meet compliance requirements, and balance security, user experience, and operational efficiency against identity threats.
fromThe Hacker News
2 months agoThe Hidden Risk of Orphan Accounts
Traditional IAM and IGA systems are designed primarily for human users and depend on manual onboarding and integration for each application - connectors, schema mapping, entitlement catalogs, and role modeling. Many applications never make it that far. Meanwhile, non-human identities (NHIs): service accounts, bots, APIs, and agent-AI processes are natively ungoverned, operating outside standard IAM frameworks and often without ownership, visibility, or lifecycle controls.
Information security
[ Load more ]