Tag Archives: microsoft 365

Tycoon 2FA Phishing: New OAuth Tactics Target Microsoft 365

The evolved Tycoon 2FA phishing kit has returned with sophisticated OAuth-based exploits specifically engineered to bypass Microsoft 365 security protocols. Continue reading

Posted in Data Protection, Security & Privacy | Tagged , , , | Leave a comment

CalPhishing Campaign: Hijacking M365 via Outlook Calendar Invites

Security researchers have identified the CalPhishing campaign, a new threat using Outlook calendar invites and the EvilTokens kit to bypass MFA and hijack accounts. Continue reading

Posted in Security & Privacy, Threat Alerts | Tagged , , , | Leave a comment