Identity, Access & Credentials

MCP Python SDK flaw leaked OAuth client secret, authorization code, and PKCE proof to attacker-controlled token endpoints.

TeamFiltration campaign (UNK_CondorFiltration) compromised Microsoft 365 accounts across 28 tenants, impacting Chilean retail and finance.

Active exploitation of a critical F5 BIG-IP OAuth/APM zero-day enables unauthenticated remote code execution; immediate patching required.

Japan dismantled a North Korean laptop farm; allied report details WaterPlum campaign and large-scale credential theft.

Gyazo breach exposed 23.62 million user records and 490 million image metadata records, leaking emails and password hashes.

Infostealer logs reveal replayable AI tokens and API keys that attackers reuse to access model providers, bypassing MFA protections.

Attackers use passkey-themed social engineering to hijack Microsoft 365 accounts, bypassing MFA and exfiltrating cloud data.

Threat actors adopt multi-agent AI frameworks to automate credential harvesting, scaling theft and account takeover operations quickly.

Three suspected Russian espionage clusters abuse OAuth and WhatsApp linking to hijack accounts at academia, aerospace and governments.

Critical Entra ID RCE patched; exploited reports prompted emergency guidance and wide Microsoft updates.