Microsoft Cloud accounts stolen in highly complex impersonation and passkey phishing campaign
THE SO WHAT
Attackers are already adapting to passkeys with complex impersonation and phishing against Microsoft Cloud accounts — authentication is no longer the only hard point. Treat identity as an active battleground: tighten conditional access, monitor anomalous session behavior, and train teams that “passwordless” doesn’t mean “phishingless.”
READ THE SOURCE
MORE FROM THE WIRE
Deep & Emerging TechNew York Seizes a Dozen Celebrity Deepfake Websites
New York seizing 12 deepfake sites targeting ~1,200 victims is a clear move to criminalize the infrastructure behind synthetic abuse, not just individual actors. If your platform touches user-generated media, assume prosecutors will expect proactive detection and takedown of deepfakes, not just reactive moderation.
Deep & Emerging TechCISA warns hackers are exploiting max severity GitLab flaw — urges all businesses to patch immediately
A 10/10 GitLab vuln on CISA’s KEV list with a three-day patch deadline means this is active, not theoretical — CI/CD and code-hosting are now prime targets. If you run GitLab anywhere in your stack, treat this like a production outage: patch, verify exposure, and log access to repos that could have been scraped.
Deep & Emerging TechDigital rights advocates urge EU to step in and save encryption from Canada's Bill C-22
Pushback on Canada’s Bill C-22 from global digital rights groups — and calls for EU intervention — show that national moves against end-to-end encryption have cross-border consequences. If your product depends on strong encryption, track this as a potential precedent that could force architectural changes or regional feature flags.
Deep & Emerging TechOxford Quantum Startup Cloq Wins Top Prize at Reuben Entrepreneurship Forum
Another quantum startup winning university pitch forums shows how much early talent and capital are clustering around quantum software and control layers. If you’re in adjacent infra — cryo, control electronics, error correction, compilers — now is the time to map where these teams might become downstream customers or partners.