Security researchers and IT professionals are raising the alarm over a sophisticated new phishing variant that targets the OAuth 2.0 authorization code flow, particularly within Microsoft Azure Active Directory (Azure AD). In a detailed demonstration during the “Offensive Entra ID (Azure AD) and...
Cybersecurity is doing its best impersonation of a neck-and-neck Grand Prix lately. Just when defenders develop a new strategy to keep threats at bay, cybercriminals step on the gas and unveil another tactic in their arsenal. Enter “Rockstar 2FA,” an ominously named piece of cybercrime artillery...