← Back to feed
general Security Affairs

iAuthFlow v2: The $10,000 Phishing Toolkit That Survives Your Password Reset

Security Affairs Google

iAuthFlow v2 phishing toolkit uses a phished Google session to enroll an attacker-controlled passkey that survives password resets. Abnormal Security researc...

T1566
Read the full story Security Affairs →

Related Coverage

general Microsoft says Entra ID identity software not exploited, revises CVE SC Media · Aug 24 general Unpatched Calix flaw lets hackers bypass NAT to expose internal devices BleepingComputer · Aug 24 general CISA adds Zimbra Collaboration Suite bug to exploited vulnerabilities list SC Media · Aug 24