Phishing

Fake sexual misconduct and Title IX emails are pushing Zoho Assist onto university staff: breaking down the Google Drive lure and how to spot abused legitimate remote access tools before they install

Fake Title IX emails push an abused Zoho Assist RAT at university staff through a Google Drive lure.

BigBear 2.0 beat MFA at 258 organizations by stealing finished sessions. The technique and the fix.

A Telegram-distributed phishing kit is bypassing MFA on Microsoft 365 with the OAuth device code flow. Here is how I detect and block it.