Filter by technique: All T1190 T1486 T1566.002 T1055.001 T1195.001 T1059.001 T1204.002 T1203

• Microsoft Flags Mass Phishing Campaign Using Fake Compliance Emails

  Infosecurity Magazine

  T1566.002 99% T1556.006 57% T1111 47%
  19 hours ago
• The Back Door Attackers Know About — and Most Security Teams Still Haven’t Closed

  The Hacker News

  T1525 84% T1528 59%
  23 hours ago
• Breaking the code: Multi-stage ‘code of conduct’ phishing campaign leads to AiTM token compromise

  Microsoft Security Blog

  T1566.002 89% T1556.006 74% T1111 62%
  1 day ago
• ConsentFix v3 attacks target Azure with automated OAuth abuse

  Bleeping Computer

  T1566.002 96% T1528 65% T1078.004 50%
  3 days ago
• Social Engineering Leveled Up. Has Your Security Program?

  Huntress

  T1566.002 93% T1528 73% T1111 68%
  4 days ago
• Patch management goes from hard, to ludicrous in the agentic AI era

  Coveware

  T1486 94% T1657 54% T1071.001 47%
  5 days ago
• AL26-010 – Cyber Criminals Social‑Engineering‑Enabled Compromise of Enterprise SaaS Environments

  CCCS Canada Alerts

  T1528 73% T1111 71% T1621 57%
  5 days ago
• Defending Against CORDIAL SPIDER and SNARKY SPIDER with Falcon Shield

  CrowdStrike Blog

  T1566.002 75% T1528 70% T1557.001 46%
  6 days ago
• Auditing Application Permissions in Microsoft Entra ID: Hidden Risks, Pitfalls, and Quarkslab's QAZPT Tool

  Quarkslab

  T1525 89% T1528 55% T1098 39%
  6 days ago
• 8 best practices for CISOs conducting risk reviews

  Microsoft Security Blog

  T1528 38%
  6 days ago
• Oluomo: Microsoft OAuth AiTM Phishing Using a Naturalization-Form Lure

  Censys

  T1566.002 97% T1528 91% T1525 88%
  2026-04-22
• What Cybersecurity Leaders Must Prioritize in 2026

  Huntress

  T1219 99% T1486 90% T1657 70%
  2026-04-22
• IR Trends Q1 2026: Phishing reemerges as top initial access vector, as attacks targeting public administration persist

  Cisco Talos Intelligence

  T1021.001 99% T1486 96% T1556.006 86%
  2026-04-22
• Detection strategies across cloud and identities against infiltrating IT workers

  Microsoft Security Blog

  T1525 75% T1528 65% T1078.004 64%
  2026-04-21
• The Vercel Breach: OAuth Supply Chain Attack Exposes the Hidden Risk in Platform Environment Variables

  Trend Micro Research

  T1195.001 98% T1525 89% T1199 83%
  2026-04-20
• Investigating Storm-2755: “Payroll pirate” attacks targeting Canadian employees

  Microsoft Threat Intelligence

  T1071.001 96% T1556.006 92% T1137.005 86%
  2026-04-09
• From Malware and Exploits to Apps and Identities: How the Browser Became the Battleground

  GuidePoint Security

  T1566.002 98% T1555.003 96% T1176.001 91%
  2026-04-08
• SOHO router compromise leads to DNS hijacking and adversary-in-the-middle attacks

  Microsoft Threat Intelligence

  T1557.001 89% T1078.004 86% T1557 78%
  2026-04-07
• Understanding Current Threats to Kubernetes Environments

  Palo Alto Unit 42

  T1190 99% T1552.007 97% T1528 95%
  2026-04-06
• New Phishing Platform Used in Credential Theft Campaigns Against C-Suite Execs

  Infosecurity Magazine

  T1566.002 96% T1556.006 71% T1111 71%
  2026-04-03
• Threat Actors Abuse Railway.com PaaS as Microsoft 365 Token Attack Infrastructure

  Huntress

  T1566.002 98% T1111 85% T1556.006 70%
  2026-03-23
• M-Trends 2026: Data, Insights, and Strategies From the Frontlines

  Mandiant

  T1486 95% T1528 67% T1078 58%
  2026-03-23
• From Misconfigured Spring Boot Actuator to SharePoint Exfiltration: How Stolen Credentials Bypass MFA

  Trend Micro Research

  T1552.001 83% T1528 70% T1525 62%
  2026-03-18
• Inside Tycoon2FA: How a leading AiTM phishing kit operated at scale

  Microsoft Threat Intelligence

  T1566.002 99% T1583.001 98% T1556.006 96%
  2026-03-04
• The Identity Breach You Didn’t Know You Had: Google Workspace

  Huntress

  T1525 80% T1078.004 78% T1111 48%
  2026-02-12
• Investigating an adversary-in-the-middle phishing campaign targeting Microsoft 365 and Okta users

  Datadog Security Labs

  T1539 99% T1566.002 98% T1111 70%
  2025-12-10
• Datacenter Infrastructure & Identity Attacks

  Huntress

  T1528 75%
  2025-12-02
• Shai-hulud 2.0 Campaign Targets Cloud and Developer Ecosystems

  Trend Micro Research

  T1195.001 99% T1552.005 90% T1555.006 88%
  2025-11-27
• The Shai-Hulud 2.0 npm worm: analysis, and what you need to know

  Datadog Security Labs

  T1195.001 99% T1587 86% T1195.002 82%
  2025-11-25
• Learnings from recent npm supply chain compromises

  Datadog Security Labs

  T1195.001 100% T1567.001 75% T1587 65%
  2025-10-30
• CoPhish: Using Microsoft Copilot Studio as a wrapper for OAuth phishing

  Datadog Security Labs

  T1525 85% T1566.002 80% T1528 75%
  2025-10-20
• SaaS Threats are Escalating: A Follow-Up to Our Recent Analysis

  Bishop Fox

  T1525 92% T1528 83%
  2025-10-14
• Domino Effect: How One Vendor's AI App Breach Toppled Giants

  Trend Micro Research

  T1199 78% T1195 48% T1528 47%
  2025-09-24
• What Is Single Sign-On? The Practical Guide | Huntress

  Huntress

  T1525 41% T1528 41%
  2025-09-08
• TAOTH Campaign Exploits End-of-Support Software to Target Traditional Chinese Users and Dissidents

  Trend Micro Research

  T1566.002 92% T1525 71% T1566.001 71%
  2025-08-28
• The Case For SigParser

  Huntress

  T1525 85% T1528 48% T1586.002 37%
  2025-07-18
• 2025 Managed ITDR Report: The Rise of Identity Threats | Huntress

  Huntress

  T1078 69% T1528 41% T1556.006 38%
  2025-05-20
• Identity Threats Got a Whole Lot Nastier, But So Did We

  Huntress

  T1528 68% T1556.006 43% T1525 34%
  2025-04-28
• Phishing for Codes: Russian Threat Actors Target Microsoft 365 OAuth Workflows

  Volexity

  T1566.002 100% T1528 90% T1525 80%
  2025-04-22
• Multiple Russian Threat Actors Targeting Microsoft Device Code Authentication

  Volexity

  T1566.002 100% T1078.004 95% T1111 80%
  2025-02-13
• 6 Months of Researching OAuth Application Attacks | Huntress

  Huntress

  T1525 92% T1528 41% T1588.002 41%
  2025-02-10
• Device Code Phishing in Google Cloud and Azure | Huntress

  Huntress

  T1528 96% T1566.002 90% T1525 81%
  2025-02-06
• Common OAuth Vulnerabilities

  Doyensec

  T1528 91% T1525 84%
  2025-01-29
• To MFA or Not To MFA | Huntress

  Huntress

  T1556.006 86% T1528 82% T1555.003 80%
  2024-11-18
• Adversary in the Middle (AitM): Post-Exploitation

  Black Hills InfoSec

  T1566.002 96% T1525 84% T1528 79%
  2024-11-04
• Inside Adversary-in-the-Middle Attacks | Huntress

  Huntress

  T1528 87% T1557 83% T1557.001 35%
  2024-10-15
• Reconnaissance: Azure Cloud w/ Kevin Klingbile

  Black Hills InfoSec

  T1110.003 92% T1525 82% T1556.006 77%
  2024-10-07
• Splitting the email atom: exploiting parsers to bypass access controls

  PortSwigger Research

  T1566.002 68% T1528 34% T1071.003 31%
  2024-08-07
• Wishing: Webhook Phishing in Teams

  Black Hills InfoSec

  T1566.002 86% T1528 67% T1071.003 57%
  2024-03-14
• Top 10 web hacking techniques of 2023 - nominations open

  PortSwigger Research

  T1190 97% T1528 59% T1588.006 57%
  2024-01-09