Canada

Device Code Phishing Hits Microsoft 365: What to Know

A sophisticated phishing campaign is actively targeting Microsoft 365 accounts at more than 340 organizations across Canada, the United States, Australia, New Zealand, and Germany, using a technique called device code phishing to capture authentication tokens that persist even after a password reset. Security researchers first detected the attacks on February 19, 2026, and the […]

Device Code Phishing Hits Microsoft 365: What to Know Read More »

Device Code Phishing: The Attack MFA Can’t Stop

News / POPP3R

A new device code phishing attack campaign has compromised over 340 organizations across five countries, including Canada, since February 19, 2026, and the pace is accelerating. Researchers at Huntress, who published their analysis this week, found that multi-factor authentication provides no protection against this attack class. Employees who complete MFA challenges believe they are signing

Device Code Phishing: The Attack MFA Can’t Stop Read More »

CIRO Breach: Financial Sector Phishing Attack Exposes 750K

News / POPP3R

A financial sector phishing attack on Canada’s investment regulator has exposed the sensitive data of 750,000 investors, including social insurance numbers, annual income figures, government-issued IDs, and detailed account statements. The Canadian Investment Regulatory Organization (CIRO) confirmed in January 2026 that a targeted email delivered in August 2025 gave an attacker unauthorized access to records

CIRO Breach: Financial Sector Phishing Attack Exposes 750K Read More »

Device Code Phishing Hits Microsoft 365: What to Know

Device Code Phishing: The Attack MFA Can’t Stop

CIRO Breach: Financial Sector Phishing Attack Exposes 750K

Quick Links

Services