Phishing poses as big-brand job interview to steal Google accounts

Multiple active campaigns and high-impact developments: a large-scale phishing operation is impersonating 30+ major brands to harvest Google account credentials via fake job interviews; new PhaaS (ARToken) and EvilTokens tooling exposes extensive Microsoft 365 phishing capabilities; ConsentFix/ClickFix OAuth attacks rapidly hijack M365 tokens and bypass MFA; attackers are using Microsoft Teams voice calls impersonating IT to deliver EtherRAT; researchers report JadePuffer ransomware automated by an LLM agent; Adobe ColdFusion vulnerability CVE-2026-48282 is being actively exploited; and Google