> TritonInfoSec News
Home / Jul 16, 2026 / Story
0
#8 BleepingComputer general July 14, 2026 at 12:49 UTC

New phishing kits target Microsoft 365 accounts, evade MFA

By Bill Toulas

AI Summary

Two newly identified phishing kits, Jalisco and OmegaLord, are actively targeting Microsoft 365 accounts using adversary-in-the-middle techniques to bypass multi-factor authentication. The kits intercept session tokens in real time, rendering standard MFA ineffective against credential theft. Their discovery reinforces findings from a separate Dark Reading report showing MFA was deployed but failed in 97% of credential-based ransomware attacks last year.

Read full article → https://www.bleepingcomputer.com/news/security/new…

Relevance score: 80.0/100

# More from July 16

  1. 1
    Microsoft July 2026 Patch Tuesday fixes massive 570 flaws, 3 zero-days BleepingComputer
  2. 2
    Two SonicWall SMA 1000 Zero-Days Exploited, One Could Enable Admin Commands The Hacker News
  3. 3
    CISA warns admins to patch actively exploited SharePoint flaws BleepingComputer
  4. 4
    Researcher Drops New Windows Zero-Day PoC Hours After Microsoft Patch Tuesday The Hacker News
  5. 5
    Microsoft’s Secure Boot has been broken for a decade and no one noticed until now Ars Technica Security
  6. 6
    US charges alleged operators of Russian bulletproof hosting service BleepingComputer
  7. 7
    Microsoft Patches a Record 570 Security Flaws Krebs on Security
  8. 9
    Compromised AsyncAPI npm Packages Deliver Multi-Stage Botnet Malware The Hacker News
  9. 10
    23andMe reaches $18 million settlement with states for massive breach The Record