A phishing framework named BigBear 2.0 bypassed multi-factor authentication at 258 organizations, according to BleepingComputer.
The service was used to steal more than 5,000 Microsoft 365 credentials, BleepingComputer reports.
Update · 03:23 pm AEST · 9 September 2026
https://www.bleepingcomputer.com/news/security/bigbear-microsoft-365-phishing-service-bypassed-mfa-at-258-organizations/
bleepingcomputer.com