Greatness PhaaS Adds Device Code Phishing to Bypass MFA and Steal Tokens
2026-08-04T19:24:01Z•9952173d39d3a21355bc3d6c2a7a7da6e0013d63cc6b205c17d7805206df3387
CVE-2026-17583CVE-2026-18556CVE-2026-18577CVE-2026-48449CVE-2026-58048AI-securityClickFixMFA-bypassOAuthRATRMMScreenConnectVPNactive-exploitationcloud-authenticationcredential-theftcryptocurrencydata-breachdevice-code-phishingiOS-targetingmalwarenpmpasskeysphishingprompt-injectionransomwareremote-accesssteganographysupply-chain-attackvulnerability
What happened
The feed highlights multiple high-impact cybersecurity developments, including active exploitation of N-able N-central authentication flaws, critical vulnerabilities in cPanel and Adobe Campaign Classic, large-scale npm supply-chain compromises, phishing and malware campaigns delivering RATs and RMM tools, MFA bypass through OAuth device-code phishing, AI-agent workflow abuse, and attacks against passkeys, VPN appliances, laboratory software, and cryptocurrency wallets.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- 9952173d39d3a21355bc3d6c2a7a7da6e0013d63cc6b205c17d7805206df3387
- Enrichment time
- 2026-08-04T19:24:01Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.