The Code Is Real. The Device Is Not: The Definitive Guide to Device Code Phishing
Executive summary Device code phishing turns a legitimate OAuth sign-in workflow into a remote...
Read More
APT42: AI-Assisted Rapport Phishing and a More Resilient TAMECAT
Executive Summary APT42 continues to refine a familiar operating model, making it harder to detect...
Read More
From Windows Telemetry to Arrest: How Microsoft’s GDID Helped Connect the Dots
Executive Summary The arrest and extradition of an alleged Scattered Spider member drew attention...
Read More