What the Akira MFA bypass campaign on SonicWall SSL VPNs says about OTP MFA at the edge of a higher-ed network
Akira actors logged in to OTP-protected VPNs because the seed itself had already been stolen.
MFA
How BigBear 2.0 beat MFA at 258 organizations
BigBear 2.0 beat MFA at 258 organizations by stealing finished sessions. The technique and the fix.
Kali365 and the OAuth Device Code Phishing Wave
A Telegram-distributed phishing kit is bypassing MFA on Microsoft 365 with the OAuth device code flow. Here is how I detect and block it.