Hosted on MSN

BigBear 2.0 hacked 258 Microsoft 365 organizations by disabling hardware security keys

A phishing-as-a-service platform called BigBear 2.0 deliberately disabled hardware security key authentication in victims' browsers using custom JavaScript before stealing their Microsoft 365 session ...

Tasks Small Businesses Can and Cannot Delegate to 'Jev,' an AI That Doesn't Write Text

There are people who open emails every morning, determine whether they are requests for quotes, invoices, or complaints, and ...

Flight delays and cancellations at number of UK airports due to air traffic control issue

Air traffic controller Nats says an issue with its "flight processing system" is causing flight disruption across UK airports, adding that "recovery will take some time".
note

Conditional branching, a story about finally understanding it in the morning

It's the third day since I switched to studying in the morning. It's finally time for a rematch with that "conditional branching." It's a topic that even made me ask myself at night, "Am I going to be ...

BigBear Microsoft 365 phishing service bypassed MFA at 258 organizations

A phishing-as-a-service framework called BigBear 2.0 has been used to bypass multi-factor authentication at 258 organizations and steal more than 5,000 Microsoft 365 credentials.
scworld

BigBear 2.0 phishing campaign compromises MFA-protected Microsoft accounts

An Evilginx2-based phishing-as-a-service (PhaaS) campaign known as BigBear 2.0 has compromised the Microsoft 365 accounts of more than 3,300 victims, including accounts protected by multi-factor ...