Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data

The feed highlights active exploitation of critical enterprise vulnerabilities, cloud-account takeover via passkey-themed phishing, software supply-chain and repository compromise, ransomware deployment, state-sponsored espionage, AI-assisted attacks, Android banking malware, exposed AI gateway credentials, and criminal scam infrastructure. Multiple vulnerabilities are listed in CISA's KEV catalog, with several enabling unauthenticated remote code execution, authentication bypass, arbitrary file read, or administrative takeover.