Research reports
1,224 reports from 387 publishers45 added in the past week
2 reports, newest added first
Added Thu 6 Aug
From Token Bingo to MAX Takeover: Kali365 Operator Expands Operation Across Microsoft Outlook, Okta, Xerox DocuShare, and Other Services
In our previous post, Token Bingo: Don’t Let Your Code Be the Winner, we documented Kali365, a phishing-as-a-service (PhaaS) kit abusing Microsoft’s OAuth 2.0 device authorization flow to steal Entra ID tokens. In this follow-up report, we track the same…
Token Bingo: Don’t Let Your Code be the Winner
In early April 2026, Arctic Wolf began tracking a large-scale device code phishing campaign impacting organizations across multiple regions and sectors. Similar to the widespread “Riding the Rails” campaign first observed in late March by Huntress, the threat…
Phishing
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.