MEDIUMPhishing
Global

Tycoon2FA hijacks Microsoft 365 accounts via device-code phishing

·Source: BleepingComputer

Updated:

Executive Summary

The Tycoon2FA phishing kit now supports device-code phishing attacks and abuses Trustifi click-tracking URLs to hijack Microsoft 365 accounts. [...]

Analysis

The Tycoon2FA phishing kit now supports device-code phishing attacks and abuses Trustifi click-tracking URLs to hijack Microsoft 365 accounts. [...]
Source Attribution

Originally published by BleepingComputer on May 17, 2026.

Related Threats

CRITICALPhishing

Universal Robots Polyscope 5

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-134-17.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Successful exploitation of these vulnerabilities could allow an attacker to bypass authentication and execute code.</strong></p> <p>The following versions of Universal Robots Polyscope 5 are affected:</p> <ul> <li>Polyscope 5 <5.25.1&

CVE-2026-8153
CISA Advisories
MEDIUMPhishing

Signal adds security warnings for social engineering, phishing attacks

Signal has introduced new in-app confirmations and warning messages as additional safeguards against phishing and social engineering attempts that could lead to various forms of fraud. [...]

BleepingComputer
CRITICALPhishing

Fuji Electric Tellus

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-132-01.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Successful exploitation of this vulnerability could allow an attacker to elevate privileges from user to system, which may then enable the attacker to cause a temporary denial of service, open files, or delete files.</strong></p> <p>T

CVE-2026-8108
CISA Advisories