Mirage2FA stole 4,561 M365 session cookies despite MFA via AiTM proxy (CVE-2026-69836 CVSS 10.0) : detection rules and WHfB/Cloud Kerberos…

First reported Nov 1, 2026, 15:21 UTC

Source reports

Mirage2FA stole 4,561 M365 session cookies despite MFA via AiTM proxy (CVE-2026-69836 CVSS 10.0) : detection rules and WHfB/Cloud Kerberos Trust hardening guide https://ift.tt/qv6tDAr Submitted November 1, 2026 at 03:45PM by doit4everyone via reddit https://ift.tt/yXuaSVW — Закрепи.sender, Nov 1, 2026, 15:21 UTC

Excerpts are quoted from the linked sources, which own their text.