MEDIUMVulnerability
Global

Entra passkey enrollment vishing targets Microsoft 365 users

·Source: BleepingComputer

Updated:

Executive Summary

A threat actor has been targeting organizations across multiple sectors with voice-based fake security requests that ask Microsoft 365 users to enroll a new Entra passkey. [...]

Analysis

A threat actor has been targeting organizations across multiple sectors with voice-based fake security requests that ask Microsoft 365 users to enroll a new Entra passkey. [...]
Source Attribution

Originally published by BleepingComputer on Jul 8, 2026.

Related Threats

CRITICALVulnerability

NVD CRITICAL: CVE-2026-9074 — IBM API Connect 10.0.8.0 through 10.0.8.9 and 12.1.0.0 through 12.1.0.3 contains...

IBM API Connect 10.0.8.0 through 10.0.8.9 and 12.1.0.0 through 12.1.0.3 contains an unauthenticated SQL injection vulnerability in the password reset functionality.

CVE-2026-9074
NIST NVD
CRITICALVulnerability

NVD CRITICAL: CVE-2026-59702 — repomix contains a server-side request forgery vulnerability in the POST /api/pa...

repomix contains a server-side request forgery vulnerability in the POST /api/pack endpoint that allows unauthenticated attackers to make arbitrary outbound requests. The endpoint fails to properly validate http://, https://, and file:// URLs before passing them to git clone, enabling attackers to access private network addresses, GCP metadata services, or local filesystem paths.

CVE-2026-59702
NIST NVD
HIGHVulnerability

NVD HIGH: CVE-2026-3144 — IBM API Connect 12.1.0.0 through 12.1.0.3 uses default credentials which could a...

IBM API Connect 12.1.0.0 through 12.1.0.3 uses default credentials which could allow an attacker to gain unauthorized access to the application before the system enforces a credential update.

CVE-2026-3144
NIST NVD