> TritonInfoSec News
Home / Jul 14, 2026 / Story
0
#10 The Hacker News general July 13, 2026 at 13:03 UTC

Forg365 PhaaS Targets Microsoft 365 with Device Code and AitM Session Theft

By [email protected] (The Hacker News)

AI Summary

Forg365, a new phishing-as-a-service platform sold via Telegram for $400/month or $3,800/year, combines device code phishing, adversary-in-the-middle session theft, AI-generated lures, and antibot evasion to compromise Microsoft 365 accounts. Security teams should update conditional access policies and monitor for device code flow abuse, as the low cost of entry makes this toolkit accessible to a wide range of threat actors.

Read full article → https://thehackernews.com/2026/07/forg365-phaas-ta…

Relevance score: 73.0/100

# More from July 14

  1. 1
    Europe strikes out against Russia’s Turla over espionage, ‘destructive attacks’ CyberScoop
  2. 2
    Russia's FSB blamed for Poland grid attack as UK and EU impose first joint cyber sanctions The Record
  3. 3
    US and allies warn of Russian critical infrastructure attacks BleepingComputer
  4. 4
    iCagenda and Balbooa Forms Joomla Flaws Reportedly Exploited as Zero-Days The Hacker News
  5. 5
    Lessons Learned from CISA’s Recent GitHub Leak Krebs on Security
  6. 6
    Progress Prompts ShareFile Storage Zone Controller Shutdown Amid Security Concerns SecurityWeek
  7. 7
    Hackers backdoor Jscrambler npm package with infostealer malware BleepingComputer
  8. 8
    EU sanctions Russian GRU military hackers over cyberattacks BleepingComputer
  9. 9
    New CrashStealer malware poses as Apple crash reporting tool BleepingComputer