Greatness PhaaS Adds Device Code Phishing to Bypass MFA and Steal Tokens

The feed reports a broad set of major cybersecurity developments, including active exploitation of N-able N-central authentication flaws, critical vulnerabilities in cPanel and Adobe Campaign Classic, phishing and malware campaigns, malicious npm supply-chain packages, ransomware activity, AI-agent workflow abuse, and large-scale account-token theft via device-code phishing. The most urgent items are actively exploited vulnerabilities and malware/supply-chain incidents that enable administrative access, arbitrary code execution, credential theft, or persistent remote access.