← Cyber news feed
Unverified 30VulnerabilityFirst seen 1 Nov 2026, 10:15 UTC
Mirage2FA stole 4,561 M365 session cookies despite MFA via AiTM proxy (CVE-2026-69836 CVSS 10.0) : detection rules and WHfB/Cloud Kerberos Trust hardening guide
Coverage
Vulnerabilities
CVSS from NVD; EPSS is FIRST’s estimate of the chance of exploitation in the next 30 days.
Why this score
| Most trusted source | 30 |
| Independent organisations reporting it (0) | +0 |
| Confirmed by an official source or CISA KEV | +0 |
| Confidence | 30 · Unverified |
|---|
We link to the original reporting and don’t reproduce it. Read the sources above for the full details.