ConsentFix and ClickFix: How Microsoft 365 Accounts are Hijacked in 3 Seconds

ConsentFix and ClickFix attacks steal Microsoft 365 tokens in seconds using fake prompts and OAuth flows. Learn how these MFA ...
Morning Overview on MSN

Apple is pushing lock-screen alerts warning that some iPhones are under active attack

Apple has begun sending lock-screen notifications to a subset of iPhone users, alerting them that their devices face active ...

This free Mac app lets you lock individual apps with Face Unlock and Touch ID

A new free and open source Mac app called FaceGate lets you lock individual apps using Face Unlock,Touch ID, or a password, all processed locally on your device.

Android 17 makes it harder for bad actors to guess and crack the PIN on your phone

Android 17 adds tougher lock-screen protections that limit failed PIN and password attempts, extend lockout timers, detect duplicate guesses, and make brute-force attacks harder ...

The attack that hijacked Claude Code came through Sentry. Datadog, PagerDuty, and Jira have the same exposure.

Tenet Security hijacked Claude Code in 85% of tests via a fake Sentry error — no stolen credentials, no alerts. Datadog and ...