https://www.csoonline.com/article/4134874/new-phishing-campaign-tricks-employees-into-bypassing-microsoft-365-mfa.html
Feb 19, 2026 - Unwitting employees register a hacker’s device to their account; the crook then uses the resulting OAuth tokens to maintain persistent access.
phishing campaignnewtricksemployeesbypassing
https://blog.knowbe4.com/uncovering-the-sophisticated-phishing-campaign-bypassing-m365-mfa
Feb 16, 2026 - KnowBe4 Threat Labs has detected a sophisticated phishing campaign targeting North American businesses and professionals.
phishing campaignuncoveringsophisticatedbypassingmfa
https://www.cyfirma.com/research/re-emerging-telegram-phishing-campaign-targeting-user-authorization-prompts/
INTRODUCTION CYFIRMA has identified an active and evolving Telegram phishing operation that abuses Telegram’s native authentication workflows to obtain fully...
phishing campaignuser authorizationemergingtelegramtargeting
https://techcratic.com/index.php/2025/12/17/apt28-targets-ukrainian-ukr-net-users-in-long-running-credential-phishing-campaign/cybersecurity/cybersecurity/
Dec 17, 2025 - info@thehackernews.com (The Hacker News) 2025-12-17 10:30:00 thehackernews.com Dec 17, 2025Ravie LakshmananEmail Security / Threat Intelligence The...
targetsukrainiannetuserslong
https://www.darktrace.com/blog/applescript-abuse-unpacking-a-macos-phishing-campaign
This blog explores a macOS phishing campaign that leverages social engineering, AppleScript loaders, and attempted abuse of the macOS’ TCC feature to gain...
phishing campaignapplescriptabuseunpackingmacos
https://blog.mozilla.org/addons/2025/08/01/warning-phishing-campaign-detected/
Aug 7, 2025 - The developer community should be aware we’ve detected a phishing campaign targeting AMO (addons.mozilla.org) accounts. Add-on developers should exercise...
phishing campaignadd onscommunity blogwarningdetected
https://natlawreview.com/article/privacy-tip-468-knowbe4-detects-phishing-campaign-targeting-microsoft-365-users
KnowBe4 reports uncovering of emerging advanced phishing campaign targeting Microsoft 365 user globally to steal credentials through powerful new tool
phishing campaignuncoversemergingadvanced