// security
$ tail -f ./security
Headlines from early disclosure channels, research labs and curated news, each with a short summary.
live updated 23 Oct, 22:38
last 24 h 73 headlines
sources 37
# Yesterday
-
Unboxing Phishing Kits: Huntress Examines 3 Real Kits
A report examined three phishing kits that provide tools for less experienced attackers to steal authentication tokens and run credential-harvesting campaigns.
-
M365 Token Spray and Replay Campaign Compromises Business Email Accounts
A 10-week Microsoft 365 campaign used token replay, AiTM relays, rogue Entra devices, MFA tampering, and hidden inbox rules to compromise business email accounts.