New downgrade attack can bypass FIDO auth in Microsoft Entra ID
Security researchers have created a new FIDO downgrade attack against Microsoft Entra ID that tricks users into authenticating with weaker login methods, making them susceptible to phishing and session hijacking.
Agentic AI Will Accelerate Account Takeovers by 50%, Warns Gartner - RedPacket Security
Within two years, AI agents are expected to enhance the efficiency with which threat actors hijack exposed accounts by 50%, according to a recent warning from
HTTP Clients Surge in Account Takeover Attacks on Microsoft 365 - RedPacket Security
In a concerning trend, cybercriminals have been seen leveraging legitimate HTTP client tools to carry out account takeover (ATO) attacks on Microsoft 365
API Supply Chain Attacks: Major Risks for Millions of Airline Users - RedPacket Security
A recently discovered vulnerability in a popular online travel service has put millions of airline users worldwide at risk of account takeover.
SIM swappers hijacking phone numbers in eSIM attacks
SIM swappers have adapted their attacks to steal a target's phone number by porting it into a new eSIM card, a digital SIM stored in a rewritable chip present on many recent smartphone models.
Former telecom manager admits to doing SIM swaps for $1,000
A former manager at a telecommunications company in New Jersey pleaded guilty to conspiracy charges for accepting money to perform unauthorized SIM swaps that enabled an accomplice to hack customer accounts.
Hacker News
RedPacket Security