Mirage2FA ne 4,561 M365 session cookies chura liye MFA ke baad bhi
Yahan publish hua 2 Nov, 1:04 am IST · Source ki tareekh 1 Nov, 3:45 pm IST
Source label batata hai khabar kahan se aayi, independent verification nahi. Reading guide
Ek research ne dikhaya ki Mirage2FA tool (CVE-2026-69836) AI‑in‑the‑middle proxy se MFA bypass karke M365 session cookies chura sakta hai.
Aapko kya karna haiSabhi users ko apne Microsoft 365 sessions logout karne aur MFA settings reset karne chahiye, aur suspicious activity monitor karein.
Updates aur sources (1)
Har update ka asli source neeche hai. Multiple links independent verification ka proof nahi hain.
- Tool ka claim hai ki wo 4,561 cookies successfully chura chuka hai.Mirage2FA stole 4,561 M365 session cookies despite MFA via AiTM proxy (CVE-2026-69836 CVSS 10.0) : detection rules and WHfB/Cloud Kerberos Trust hardening guide ↗
Aapki raay