Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Defending Against Device Code Phishing: The 2026 OAuth Bypass Threat
Defending Against Device Code Phishing: The 2026 OAuth Bypass Threat Device code phishing has emerged as the fastest-growing social engineer...
Real-Time Insurance Account Hijacking: Defending Against AiTM Social Engineering
Introduction The traditional model of credential harvesting—tricking a user into divulging credentials and storing them for future use—is ef...
Clover Health Social Engineering Incident: Defending Against Human-Centered Breaches
Clover Health Social Engineering Incident: Defending Against Human-Centered Breaches Introduction Clover Health Investments recently filed a...
Scattered Spider TfL Breach: Defending Against Social Engineering and MFA Bypass
Introduction The recent sentencing of two high-profile members of the Scattered Spider (aka 0ktapus) collective to five years and six months...
Identity Attacks Overtake Exploits: Defending Against the Rise of MFA Bypass Ransomware
Introduction The paradigm has shifted. For years, we fortified our perimeters against exploits and unpatched vulnerabilities. But according ...
Azure Priv-Esc, Kali365 MFA Bypass & Claude Plugin: Critical Detection & Remediation Guide
Azure Priv-Esc, Kali365 MFA Bypass & Claude Plugin: Critical Detection & Remediation Guide Introduction This ThreatsDay Bulletin drops multi...
EvilTokens PhaaS: OAuth Device Code Flow Bypass – Detection and Defense
EvilTokens PhaaS: OAuth Device Code Flow Bypass – Detection and Defense Introduction In February 2026, a new threat actor known as EvilToken...
Law Enforcement Dismantles Tycoon 2FA: Hunting the AiTM PhaaS Threat
Law Enforcement Dismantles Tycoon 2FA: Hunting the AiTM PhaaS Threat In a significant win for global cybersecurity, a coalition led by Europ...
Bypassing the Fortress: Why MFA Fails to Stop Credential Abuse in Windows
The Illusion of the Silver Bullet In the modern cybersecurity landscape, Multi-Factor Authentication (MFA) is often treated as the ultimate ...