Bleepingcomputer ShinyHunters Target SSO Accounts in Voice Phishing Attacks
Article Content
Browse articles 
The ShinyHunters extortion gang has claimed responsibility for a series of voice phishing attacks targeting single sign-on (SSO) accounts at major platforms including Okta, Microsoft, and Google. In these attacks, threat actors impersonate IT support to trick employees into providing their credentials and multi-factor authentication codes, enabling access to corporate SaaS platforms and potential data theft for extortion purposes.
Ask AI about this cluster
Answers cite the sources they use
Updated 210d ago How this analysis works
More articles in this cluster (191)
Following this threat?
Track shinyhunters, AMD and CVE-2026-20131 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical Command Injection Vulnerability in Tenable Identity Exposure SaaS A critical command injection vulnerability (CVE-2026-106126) has been identified in the Tenable Identity Exposure SaaS platform, rated 9.9 on the CVSS scale. This flaw allows authenticated, low-privileged attackers to execute arbitrary commands with SYSTEM-level privileges on the Primary Domain Controller Emulator… 
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…