Do Son Trump Mobile data breach: BYOD leaks Trump Mobile customer data for 3,615 people, including Trump allies, via an infostealer and no MFA.
MFA
OpenAI launches Advanced Account Security for high-risk users. Features include mandatory passkeys, disabled SMS recovery, and automatic training exclusion.
NCSC warns high-risk individuals of Russian and Chinese state actors hijacking WhatsApp and Signal. Protect your chats with these essential 2026 defense tips.
Microsoft Authenticator will purge Entra ID credentials from jailbroken/rooted devices starting Feb 2026 to block token theft, enforcing security for enterprise accounts.
A critical, unpatched OnePlus flaw (CVE-2025-10184) allows any app to read SMS data without permission, breaking MFA protections. PoC is available.
Okta Threat Intelligence uncovers VoidProxy, a dangerous new Phishing-as-a-Service (PhaaS) platform that uses Adversary-in-the-Middle attacks to bypass MFA.
Microsoft will begin enforcing mandatory MFA for all Azure resource management operations starting October 1, 2025, to enhance cloud security.
New research from Proofpoint shows that attackers can bypass FIDO passkeys using a downgrade attack, forcing a fallback to less secure authentication methods.
Proton has patched a critical flaw in its iOS Authenticator app (v1.1.1) that logged TOTP secrets in plaintext. Users are urged to update immediately to secure their accounts.
Proton introduces a new, open-source MFA app, Proton Authenticator, designed to separate 2FA codes from passwords for enhanced security with end-to-end encryption.
iOS 26's Passwords app now lets users view the complete history of saved credentials, making it easier to recover overwritten or forgotten passwords.
A ZITADEL vulnerability allows host header injection to hijack user accounts via password reset links. Update to 3.2.2+ or configure proxy.
SonicWall urges urgent updates to SMA 100 Series devices after critical post-auth vulnerabilities expose systems to file deletion and command injection.
The UK's NCSC warns of a pervasive ransomware threat targeting all organizations. Learn key recommendations to enhance your cyber security and resilience.
Cisco Talos reports on AiTM attacks that bypass MFA by using reverse proxies to steal credentials and session cookies, leading to account takeover.
Microsoft will soon default new accounts to passwordless login with passkeys & MFA. Existing users can still choose passwords. Learn more!
CISA warns of potential risks from Oracle cloud credential exposure. Urges password resets, MFA, and vigilance against phishing attacks.