#Social Engineering
CVE-2026-41615: Microsoft Authenticator Token Theft Risk
CVE-2026-41615: Microsoft Authenticator Token Theft Risk | 2026 Executive Summary CVE-2026-41615 is a critical Microsoft Authenticator flaw that can expose ente...
Lucas Oliveira
Research
TCLBANKER turns WhatsApp and Outlook into trusted malware delivery channels
TCLBANKER turns WhatsApp and Outlook into trusted malware delivery channels The most important detail in Elastic's new TCLBANKER research is not just that a Bra...
Lucas Oliveira
Research
Vishing and SSO abuse are accelerating rapid SaaS extortion
Vishing and SSO abuse are accelerating rapid SaaS extortion The most dangerous part of modern SaaS intrusions is not always malware. Sometimes it is speed, trus...
Lucas Oliveira
Research
ConsentFix v3 turns Azure OAuth phishing into a scalable token theft risk
ConsentFix v3 turns Azure OAuth phishing into a scalable token theft risk ConsentFix v3 matters because it shifts Azure account compromise away from password th...
Lucas Oliveira
Research
Crunchyroll confirms support data exposure after vendor incident
Crunchyroll confirms support data exposure after vendor incident | 2026 Executive Summary Crunchyroll says customer support ticket data was exposed after a Marc...
Lucas Oliveira
Research