iam – Cybersecurity.watch

N0va Phishkit Targets US and EU Businesses: a New Challenge for Identity Security

Sep 17 2026

The N0va phishkit is conducting sophisticated phishing campaigns targeting organizations across North America and Europe, leveraging trusted business platforms and legitimate authentication flows to steal access tokens and gain single sign-on entry to corporate resources. This identity compromise risks financial loss, sensitive data exposure, operational disruption, and reputational damage, especially in high-risk sectors such as government, healthcare, and technology. Security teams are advised to use advanced threat intelligence tools and behavioral analysis to detect, contextualize, and respond swiftly to N0va-related attacks to minimize impact and contain breaches effectively.

https://thehackernews.com/2026/09/n0va-phishkit-targets-us-and-eu.html

Entra Passkey Enrollment Vishing Targets Microsoft 365 Users

A threat actor tracked as O-UNC-066 has been conducting vishing campaigns targeting Microsoft 365 users across multiple industries by impersonating Microsoft Entra passkey enrollment processes. Attackers use phishing sites mimicking legitimate enrollment portals to trick victims into registering passkeys controlled by the attacker, enabling account takeover and data theft from SharePoint and OneDrive. The extortion group Pink, associated with this campaign, exfiltrates stolen data and pressures victims for ransom payments.

https://www.bleepingcomputer.com/news/security/entra-passkey-enrollment-vishing-targets-microsoft-365-users/