ConsentFix and ClickFix: How Microsoft 365 Accounts are Hijacked in 3 Seconds

ConsentFix and ClickFix attacks steal Microsoft 365 tokens in seconds using fake prompts and OAuth flows. Learn how these MFA ...

FBI warns Microsoft users about passwordless scam

The FBI warns about Kali365, a phishing scam targeting Microsoft 365 accounts that can bypass multifactor authentication ...
The Next Web

FBI says Russian intelligence hackers have a new trick for reading your Signal messages, and it works even after you change phones

Russian intelligence hackers are phishing Signal users for their backup recovery key, giving attackers full access to message history, the FBI warns.
IEEE

Covert Message Authentication in MIMO Communications

Abstract: We propose a novel covert message authentication technique designed to completely obscure the existence of the digital signature, rendering it secure against integrity attacks. This ...
Ars Technica

Critical Copilot vulnerability allowed hackers to steal 2FA code from users

Last Tuesday, Microsoft patched a vulnerability it rated as max critical in its M365 Copilot AI platform. On Monday, the researchers who discovered the vulnerability and reported it to Microsoft ...
The Hill

FBI issues urgent Kali365 security warning for Teams, Outlook, OneDrive users

The FBI released an urgent security warning to the public about a fast-acting scam targeting Microsoft 365 users on Teams, Outlook and OneDrive. The agency warned that the hacking platform Kali365 ...