Cyber Intelligence

The New Phishing Click: How OAuth Consent Bypasses MFA

Medium Severity Global
Date Occurred May 19, 2026 11:30 UTC
Event Type Cyber Intelligence
Source TheHackerNews
Recorded May 19, 2026
Full Description

In February 2026, a phishing-as-a-service (PhaaS) platform called EvilTokens went live. Within five weeks, it had compromised more than 340 Microsoft 365 organizations across five countries.  Th

Event Metadata
  • ID #2243
  • Type Cyber Intelligence
  • Region Global
  • Severity Medium
  • Indexed May 19, 2026