Tag
3 results in the archive.
Palo Alto Networks has disclosed exploitation of CVE-2026-0257, an authentication bypass vulnerability in PAN-OS and Prisma Access used by Qilin and INC ransomware groups to gain unauthorized VPN access.
Attackers exploit passkey-themed social engineering to bypass MFA and leverage Microsoft Graph for access to SharePoint, OneDrive, and email data, impacting cloud and identity security.
The Greatness phishing-as-a-service toolkit now uses device code phishing to exploit OAuth 2.0 Device Authorization Grant, bypassing MFA and hijacking accounts.