Tag Archives: Multi-factor authentication
Microsoft Entra ID Phasing Out SMS and Voice MFA for Passkeys
Microsoft Entra ID is retiring SMS and voice-based multi-factor authentication in favor of phishing-resistant passkeys to enhance enterprise security standards. Continue reading
Ghost Phishing: New EvilTokens Campaign Bypasses MFA Security
Discover how the sophisticated ghost phishing campaign utilizes EvilTokens and OAuth exploits to bypass multi-factor authentication and compromise Microsoft 365 accounts. Continue reading
DEBULL Tool Abuses Microsoft Device-Code Flow to Target M365 Accounts
Security researchers have uncovered the DEBULL tool, a new phishing framework that exploits the Microsoft device-code flow to bypass M365 2FA protocols. Continue reading
Legacy Authentication Exploited in Massive Azure CLI Password Spray
Discover how threat actors exploited legacy authentication and ROPC flows in a massive Azure CLI password spray attack, bypassing MFA for dozens of organizations. Continue reading
Salesforce MFA Mandate: Password Managers with Passkeys Now Supported
Salesforce officially confirms that FIDO2-compliant password managers using passkeys satisfy the Salesforce MFA mandate for privileged users. Continue reading
Netflix Security Update: Mandatory MFA and Phased SMS Support
Netflix announces a major Netflix security update requiring mandatory MFA, phasing out SMS-based verification to enhance account protection and stop unauthorized sharing. Continue reading
Phishing-Resistant MFA: Why Passwordless Security Is Critical in 2026
On International Passwordless Day 2026, experts warn against password reliance and urge a global shift toward phishing-resistant MFA to combat AI-driven attacks. Continue reading
FortiBleed Credential Leak: CISA Issues Emergency Alert for 74,000 Fortinet Devices
CISA has issued an emergency alert regarding the FortiBleed credential leak, which has compromised over 74,000 Fortinet devices worldwide through massive brute-force attacks. Continue reading
Dashlane Data Breach: Hackers Bypass 2FA to Target Encrypted Vaults
A recent Dashlane data breach allowed attackers to bypass 2FA and access encrypted user vaults. Learn how this incident impacts security and why upgrading to phishing-resistant MFA is critical. Continue reading