2 posts
The Canadian Centre for Cyber Security issued a daily digest highlighting recent security advisories from Trend Micro and FreeBSD. The advisories address unspecified vulnerabilities in Trend Micro Apex One and Vision One Endpoint products, as well as all supported versions of FreeBSD, prompting immediate patching.
Threat actors are leveraging the EvilTokens Phishing-as-a-Service platform hosted on Railway.com to conduct large-scale device code phishing campaigns against Microsoft 365 users. By abusing legitimate cloud infrastructure and multi-hop redirect chains, attackers successfully bypass email filtering and MFA to harvest persistent OAuth tokens.
