Related Threat Clusters
-
Multiple CVEs Disclosed on September 8, 2026, Affecting Microsoft Products
On September 8, 2026, multiple CVEs were disclosed affecting various Microsoft products, including SharePoint and Office. Key vulnerabilities include improper access controls, buffer overflows, and command injections,…
927 articles · Updated September 8, 2026 -
Surge in Password Spraying Attacks Exploits MFA Gaps
In the first half of 2026, Huntress reported a 155x increase in password spraying attacks, primarily targeting Microsoft's Azure CLI. This surge was driven by a campaign from LSHIY LLC, resulting in over 81 million…
6 articles · Updated August 19, 2026 -
Automated ConsentFix v3 Attack Targets Microsoft Azure Accounts
A new attack technique named ConsentFix v3 has emerged, automating the hijacking of Microsoft Azure accounts through sophisticated phishing methods. This attack builds on previous versions by enhancing automation and…
2 articles · Updated May 4, 2026 -
Massive Password Spray Attack Targets Microsoft 365 Accounts
A significant automated password spray attack has targeted Microsoft 365 environments, generating over 81 million login attempts between June 12 and June 26, 2026. The attack, attributed to a threat actor using an IPv6…
11 articles · Updated July 1, 2026 -
Cybersecurity Trends Shaping 2026: AI Exploits and Privacy Erosion
As we approach 2026, the cybersecurity landscape is shifting dramatically. Key trends include the evolving role of the CISO as a financial risk broker, the rise of AI in both creating exploits and automating tasks, and…
3 articles · Updated December 15, 2025 -
ConsentFix Attack Exploits Azure CLI to Compromise Microsoft Accounts
The ConsentFix attack is a new phishing technique that allows attackers to hijack Microsoft accounts by exploiting the Azure CLI app. This method bypasses traditional security measures such as passwords and multi-factor…
2 articles · Updated December 12, 2025
Recent Intelligence Reports
- CVE-2026 — Api.Msrc.Microsoft · September 8, 2026
- 81 million Azure login attempts exposed an MFA blind spot — Feeds.4Sysops · August 19, 2026
- 155x increase in password spraying attacks — www.huntress.com · August 19, 2026
- Password spraying attacks surge 155x as hackers exploit MFA gaps — Bleepingcomputer · August 19, 2026
- Azure CLI Password Spray Hits at Least 78 Microsoft Accounts in 81M+ Attempts — Thehackernews · July 1, 2026
- Hackers target Microsoft 365 accounts with 81 million login attempts — Bleepingcomputer · July 1, 2026
- Massive Automated Password Spray Attack Targeting Microsoft’s Azure Command — Cybersecuritynews · July 1, 2026
- Azure CLI Targeted in LSHIY Password Spray Campaign Across 64 Orgs — Securityaffairs.Co · July 1, 2026