Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data

The feed highlights active exploitation of critical enterprise vulnerabilities, including Cisco Secure Firewall Management Center authentication bypasses, JFrog Artifactory flaws, GitLab arbitrary file reads, PaperCut vulnerabilities, and issues affecting network and security appliances. It also covers passkey and cloud-account phishing, malware and ransomware campaigns, AI-assisted exploitation, software supply-chain attacks, Android banking malware, exposed AI gateways, and espionage activity using exploit kits. Organizations should prioritize KEV-listed and actively exploited flaws, patch C