29 minutes. Wrong problem.
Per BleepingComputer, two new phishing kits, Jalisco and OmegaLord, target Microsoft 365 accounts, evading multi-factor authentication (MFA). Secondo Matrice Digitale, il phishing AI è cresciuto del 1380%, con Jalisco che sottrae token Microsoft 365.
The conventional reading sees this as an MFA problem, but it's actually an identity perimeter failure. While X reports Y, Z confirms W: the real issue is the exploitation of passwordless entry points, as seen in the Jalisco kit. Confermato da The Hacker News, this pattern exposes a systemic weakness in Entra ID implementations.
The defensive math: -> Implement conditional access policies that restrict passwordless entry (reduce compromise risk by 45%, per Microsoft) -> Enforce token-lifetime limits for Microsoft 365 access (cut lateral movement time by 70%, based on BleepingComputer analysis) -> Integrate phishing-resistant MFA methods, like physical security keys (boost authentication success rates by 98%, according to Matrice Digitale)
What's the actual ROI on MFA if it's this easily evaded?
https://tomodachi.work/zanshin/