Evolution of MFA fatigue attacks (push bombing) in 2026, combination with AitM phishing, number matching deployment at Microsoft, Okta and Duo, and recommended configuration for enterprises.
The UNC6783 group impersonates IT support staff by phone, then redirects victims to fake Okta login pages to bypass MFA in real time. A practical guide for detection and defense.
A massive OAuth device code phishing campaign has compromised more than 340 Microsoft 365 organizations across 5 countries. Attackers abuse Microsoft's legitimate device authorization flow to obtain persistent tokens that bypass MFA.
Anime streaming platform Crunchyroll (Sony) was breached on March 12, 2026. 100 GB of data exfiltrated via a compromised TELUS employee.
Microsoft DART reveals an active vishing campaign via Teams where attackers impersonate IT support and use Quick Assist to take control of workstations.