Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data

The feed highlights multiple high-impact cybersecurity developments, including active exploitation of critical vulnerabilities in Cisco FMC, GitLab, JFrog Artifactory, PaperCut, and other products; phishing and passkey-based cloud account hijacking; ransomware and backdoor deployment; AI-assisted exploitation and malware development; supply-chain attacks; Android banking malware; exposed AI gateways; and credential or token theft that can bypass MFA. Several vulnerabilities are listed in CISA’s KEV catalog or carry maximum-severity ratings, indicating urgent patching and defensive action.