Tag Archives: Multi-factor authentication

Mandatory MFA Proposed by Thailand Digital Ministry After Massive Data Breach

Thailand’s Digital Ministry has proposed mandatory MFA for all state digital infrastructure following the exposure of 221 million login records. Continue reading →

Posted in Data Protection, Security & Privacy | Tagged , , , | Leave a comment

Proton Pass Update Brings Major Improvements to Autofill and 2FA

Discover the latest Proton Pass update featuring overhauled form detection, streamlined 2FA verification protocols, and new enterprise security deployment options. Continue reading →

Posted in Data Protection, Security & Privacy | Tagged , , , | Leave a comment

QR Code Phishing Campaign UAT-11764 Bypasses Security Gateways

Cisco Talos warns of a persistent QR code phishing campaign by UAT-11764 that evades email gateways and targets Microsoft 365 environments. Continue reading →

Posted in Security & Privacy, Threat Alerts | Tagged , , , | Leave a comment

Pass-the-Passkey Attack Chain Exposes Windows 11 and Entra ID Vulnerabilities

Discover how the new Pass-the-Passkey attack chain bypasses Windows 11 and Entra ID authentication through local logging flaws and token replay. Continue reading →

Posted in Data Protection, Security & Privacy | Tagged , , , | Leave a comment

Session Hijacking Defeats Password Resets, Sparking Shift to Phishing-Resistant 2FA

Cybersecurity experts warn that session hijacking bypasses standard password resets, driving an urgent industry shift toward phishing-resistant 2FA and continuous token validation. Continue reading →

Posted in Data Protection, Security & Privacy | Tagged , , , | Leave a comment

Laundry Bear APT Exploits Zimbra Zero-Day to Steal Passwords and 2FA Codes

A joint cybersecurity advisory warns that the Russian APT Laundry Bear is exploiting a Zimbra zero-day vulnerability to steal saved passwords and 2FA recovery codes. Continue reading →

Posted in Data Protection, Security & Privacy | Tagged , , , | Leave a comment

Kratos Phishing Kit Dismantled by International Law Enforcement

Global law enforcement has taken down the Kratos phishing kit infrastructure, a sophisticated platform designed to bypass 2FA protocols using adversary-in-the-middle attacks. Continue reading →

Posted in Data Protection, Security & Privacy | Tagged , , , | Leave a comment

Phishing-as-a-Service Platform ‘Kratos’ Dismantled by International Law Enforcement

International law enforcement agencies have dismantled the Kratos Phishing-as-a-Service platform, seizing over 200 servers and arresting its alleged administrator in Indonesia. Continue reading →

Posted in Security & Privacy, Threat Alerts | Tagged , , , | Leave a comment

YubiKey 5.8 Firmware Released with Advanced Passkey Authorization

Discover how the new YubiKey 5.8 firmware expands hardware-backed passkeys beyond login authentication into secure digital authorization for enterprise workflows. Continue reading →

Posted in Data Protection, Security & Privacy | Tagged , , | Leave a comment