Researchers detail new AI and phishing kits that steal credentials, bypass MFA, and scale attacks across major services.
A new variation of the ClickFix attack dubbed 'ConsentFix' abuses the Azure CLI OAuth app to hijack Microsoft accounts without the need for a password or to bypass multi-factor authentication (MFA) ...