Nuevo esquema de phishing explota la inscripción de claves de acceso de Microsoft Entra para comprometer cuentas de Microsoft 365

NewsBy Cristian SantanaJuly 11, 2026

Nuevo esquema de phishing explota la inscripción de claves de acceso de Microsoft Entra para comprometer cuentas de Microsoft 365 Descripción General del Ataque Ha surgido una nueva campaña de phishing sofisticada, que apunta a organizaciones de diversos sectores con solicitudes de seguridad fraudulentas que engañan a los usuarios de Microsoft 365 para inscribir nuevas…

New Phishing Scheme Exploits Microsoft Entra Passkey Enrollment to Compromise Microsoft 365 Accounts

NewsBy Cristian SantanaJuly 11, 2026

New Phishing Scheme Exploits Microsoft Entra Passkey Enrollment to Compromise Microsoft 365 Accounts Overview of the Attack A sophisticated new phishing campaign has emerged, targeting organizations across various sectors with fraudulent security requests that deceive Microsoft 365 users into enrolling new Entra passkeys. This tactic, used by a group of threat actors identified as O-UNC-066…

CISA Strengthens Cybersecurity Posture Following Major Credential Leak

NewsBy Cristian SantanaJuly 11, 2026

CISA Strengthens Cybersecurity Posture Following Major Credential Leak Background and Context The Cybersecurity and Infrastructure Security Agency (CISA) has recently come under intense scrutiny following a significant credential leak that occurred in May 2023. This incident, characterized by the exposure of privileged Amazon AWS GovCloud Keys, was labeled as one of the most severe breaches…