Russian Espionage Group Exploited Zimbra Security Flaw for Email and 2FA Theft23. July 2026CybersecurityA zero-day vulnerability in Zimbra enabled Russian attackers to exfiltrate 90 days of email history, directories, stored passwords, and 2FA recovery codes by simply opening a message. Share on:
EvilTokens: Phishing-as-a-Service Bypasses Two-Factor Authentication on Microsoft 36517. June 2026CybersecurityEvilTokens exploits OAuth 2.0 device flows to compromise 2FA-protected Microsoft 365 accounts by tricking users into authorizing devices. Share on:
