mfa-bypass

2 live · 3 on record · last incident 8 days ago

Dec ’25records per month, by first reportNov ’26

Live2

live7.5
SonicOS SSLVPN CVE-2026-19868: SonicWall SonicOS SSLVPN MFA Bypass
Patch now · Exploited · Patched · since 6 Nov 2026 · updated 9 Nov 2026 · CVE-2026-19868
SonicWall SonicOS SSLVPN contains a use of single-factor authentication vulnerability that allows users to bypass SAML authentication and multi-factor controls. The flaw is actively exploited in the wild and has been added to the CISA Known Exploited Vulnerabilities catalog.
Do:Apply mitigations in accordance with vendor instructions and CISA guidance.
live
Google Calendar Operation CloudFire Phishing Campaign Hijacks Google Sessions
Breaches & attacks · Exploited · since 4 Nov 2026 · updated 12 Nov 2026
A phishing campaign used Google Calendar invites and fake login pages to bypass multi-factor authentication and hijack corporate sessions. Security researchers tracked the attacks and assisted in taking down hundreds of domains used in the campaign.