Do Son Despite a global takedown, Tycoon 2FA is back. It now abuses Microsoft's device code flow to bypass MFA entirely. Disabling this flow is critical.
Multi-Factor Authentication
Open database with 184M leaked credentials found—users urged to change exposed passwords and enable 2FA to protect accounts from future breaches.
Cisco Talos reports on AiTM attacks that bypass MFA by using reverse proxies to steal credentials and session cookies, leading to account takeover.
Microsoft will soon default new accounts to passwordless login with passkeys & MFA. Existing users can still choose passwords. Learn more!