The phishing-as-a-service toolkit leverages legitimate authentication to capture tokens and access Microsoft 365 services.

Device code phishing targets 340+ Microsoft 365 orgs since Feb 2026 via OAuth abuse, enabling persistent token hijacking and ...

Hackers can steal your GitHub tokens through OpenAI’s Codex using nothing more than a sneaky branch name ...

Security analysts have found a severe security vulnerability in the desktop app for Microsoft Teams that gives threat actors access to authentication tokens and accounts with multi-factor ...

Passing MFA doesn't mean a session is safe, attackers can hijack tokens and bypass identity checks. Specops Software explains ...

Microsoft Teams stores authentication tokens in unencrypted plaintext mode, allowing attackers to potentially control communications within an organization, according to the security firm Vectra. The ...

VeriSign has released VIP (VeriSign Identity Protection) Access for Mobile (iTunes Link), a free app that lets you supplement typical user Web site log-ins with an extra, cryptographically strong ID ...

New $15 Price And Lifetime Replacement Option For ActivCard Dynamic Password RSA Conference, SAN FRANCISCO, CA – February 23, 2004 – ActivCard Corp. (NASDAQ: ACTI), a global provider of strong ...

Diversinet's MobiSecure suite of mobile tokens and mobile authentication services are an OATH-compliant solution, which allows customers to have the flexibility to incorporate One Time Password (OTP) ...

RSA Security's proposed acquisition of privately held Cyota will allow the company to offer a relatively cheap two factor, non token-based authentication system for its banking customers. RSA is ...