FBI warns of Kali365 phishing service targeting Microsoft 365 accounts

The FBI is warning about the Kali365 phishing-as-a-service platform (PhaaS) that is used to hijack Microsoft 365 accounts by abusing OAuth device code authentication to steal session tokens and bypass ...

MFA verifies who logged in. It has no idea what they do next.

What happens after MFA succeeds? How session token theft lets attackers move laterally through enterprise networks without ...
IEEE

A Comparison of a Touch-Gesture- and a Keystroke-Based Password Method: Toward Shoulder-Surfing Resistant Mobile User Authentication

Abstract: The pervasive use of mobile devices exposes users to an elevated risk of shoulder-surfing attacks. Despite the prior work on shoulder-surfing resistance of mobile user authentication methods ...
IEEE

A Data Ownership Authentication Method for Graph Neural Networks via Clean-Label Backdoor

Abstract: Graph neural network (GNN) have gained extensive adoption in diverse fields, including IoT anomaly detection, social network analysis, and drug molecule prediction, due to their exceptional ...