Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Passkey Phishing Attacks on Microsoft Entra ID: Detection and Hardening Guide for Cloud Account Takeover
Introduction Microsoft has disclosed two active campaigns that should be on every cloud defender's radar right now. The first is a high-volu...
ShinyHunters Passkey Phishing Campaign Targets Microsoft 365: Detection and Defense Guide for SSO Social Engineering Attacks
Introduction Microsoft has confirmed that threat actors affiliated with ShinyHunters, Helix, and other extortion-focused criminal groups are...
Armored Likho 'Still Toolkit' Rust Espionage + Storm-3121 Passkey AiTM Phishing: OTX Pulse Analysis — Credential Theft Detection Pack
Armored Likho 'Still Toolkit' Rust Espionage + Storm-3121 Passkey AiTM Phishing: OTX Pulse Analysis Two fresh AlienVault OTX pulses converge...
Storm-3121/Storm-3032 Passkey AiTM Phishing + AI-Driven PaperCut Exploitation: OTX Pulse Analysis — Identity & Credential Defense Pack
From The Dark Side: Threat Intelligence Briefing Threat Summary Two converging credential-theft operations dominate this reporting window, a...
Passkey-Themed Social Engineering: How Attackers Hijack Entra ID Identities and Pivot to Cloud Data — Detection and Hardening Guide
Introduction Microsoft's threat intelligence teams have published a critical warning this week: threat actors are running passkey-themed soc...