https://legacymfa.sucks/1.0daily https://legacymfa.sucks/posts/2023-01-13-mailchimp-social-engineering-stole-employee-credentials.html2026-09-180.8monthly https://legacymfa.sucks/posts/2023-02-05-reddit-employee-phishing-hit-internal-systems.html2026-09-180.8monthly https://legacymfa.sucks/posts/2023-03-01-corteva-adp-call-center-dob-reset-diverted-payroll.html2026-09-180.8monthly https://legacymfa.sucks/posts/2023-04-20-the-standard-aitm-spear-phish-stole-email-sessions.html2026-09-180.8monthly https://legacymfa.sucks/posts/2023-05-16-henry-ford-health-email-phishing-hit-3-mailboxes.html2026-09-180.8monthly https://legacymfa.sucks/posts/2024-01-19-microsoft-midnight-blizzard-password-spray-no-mfa.html2026-09-180.8monthly https://legacymfa.sucks/posts/2024-02-12-change-healthcare-citrix-portal-had-no-mfa.html2026-09-180.8monthly https://legacymfa.sucks/posts/2024-03-20-la-county-dmh-qr-phishing-took-m365-mailbox.html2026-09-180.8monthly https://legacymfa.sucks/posts/2024-04-01-cisco-duo-supplier-phish-exposed-sms-mfa-logs.html2026-09-180.8monthly https://legacymfa.sucks/posts/2024-05-23-michigan-medicine-it-desk-password-reset-vishing.html2026-09-180.8monthly https://legacymfa.sucks/posts/2024-06-13-scattered-spider-helpdesk-mfa-reset-okta-saas-attack.html2026-09-180.8monthly https://legacymfa.sucks/posts/2024-07-30-michigan-medicine-employee-approved-unsolicited-mfa.html2026-09-180.8monthly https://legacymfa.sucks/posts/2024-08-27-guidepoint-grit-vpn-vishing-mfa-harvest.html2026-09-180.8monthly https://legacymfa.sucks/posts/2024-09-01-tfl-scattered-spider-helpdesk-2fa-reset.html2026-09-180.8monthly https://legacymfa.sucks/posts/2024-10-16-iranian-m365-spray-and-mfa-push-bombing.html2026-09-180.8monthly https://legacymfa.sucks/posts/2024-11-08-seyfarth-shaw-helpdesk-mfa-phone-number-swap.html2026-09-180.8monthly https://legacymfa.sucks/posts/2024-12-11-okta-support-impersonation-sought-mfa-tokens.html2026-09-180.8monthly https://legacymfa.sucks/posts/2025-01-17-powerschool-powersource-no-mfa-support-login.html2026-09-180.8monthly https://legacymfa.sucks/posts/2025-02-13-simmons-workday-phishing-and-fraudulent-mfa-approval.html2026-09-180.8monthly https://legacymfa.sucks/posts/2025-03-01-uk-industrial-aitm-phishing-stole-workforce-sessions.html2026-09-180.8monthly https://legacymfa.sucks/posts/2025-04-17-ms-helpdesk-password-reset-social-engineering.html2026-09-180.8monthly https://legacymfa.sucks/posts/2025-05-02-co-op-helpdesk-reset-enabled-member-data-theft.html2026-09-180.8monthly https://legacymfa.sucks/posts/2025-06-20-aflac-social-engineering-opened-network-access.html2026-09-180.8monthly https://legacymfa.sucks/posts/2025-07-24-cisco-crm-vishing-exported-basic-profile-data.html2026-09-180.8monthly https://legacymfa.sucks/posts/2025-08-15-workday-hr-it-vishing-accessed-third-party-crm.html2026-09-180.8monthly https://legacymfa.sucks/posts/2025-09-12-unc6040-salesforce-vishing-stole-mfa-codes.html2026-09-180.8monthly https://legacymfa.sucks/posts/2025-10-15-whisper2fa-aitm-harvested-m365-mfa-tokens.html2026-09-180.8monthly https://legacymfa.sucks/posts/2025-11-15-princeton-oit-vishing-won-a-duo-push-approval.html2026-09-180.8monthly https://legacymfa.sucks/posts/2025-12-15-okta-payroll-pirates-helpdesk-mfa-re-enrollment.html2026-09-180.8monthly https://legacymfa.sucks/posts/2026-08-31-spring-ring-teams-vishing-never-stole-mfa-codes.html2026-09-160.8monthly https://legacymfa.sucks/posts/2026-09-07-bigbear-20-evilginx2-stole-m365-cookies-after-mfa.html2026-09-160.8monthly https://legacymfa.sucks/posts/2026-09-09-adapthealth-contractor-se-exposed-41m-patients.html2026-09-160.8monthly https://legacymfa.sucks/posts/2026-09-09-aesto-health-95m-breach-has-no-public-vector.html2026-09-160.8monthly https://legacymfa.sucks/posts/2026-09-09-passkey-helpdesk-vishing-stole-entra-m365-sessions.html2026-09-160.8monthly https://legacymfa.sucks/posts/2026-09-10-midnight-blizzard-device-code-phishing-stole-m365-tokens.html2026-09-160.8monthly https://legacymfa.sucks/posts/2026-09-15-ghostcode-stole-oauth-tokens-after-real-microsoft-mfa.html2026-09-160.8monthly https://legacymfa.sucks/posts/2026-09-09-n0va-kit-real-mfa-stolen-microsoft-tokens.html2026-09-140.8monthly https://legacymfa.sucks/posts/2026-08-04-ieh-m365-mailbox-phished-via-fake-login-page.html2026-08-310.8monthly https://legacymfa.sucks/posts/2026-08-10-gunra-fortinet-vpn-and-vdi-otp-backdoor-ttps.html2026-08-310.8monthly https://legacymfa.sucks/posts/2026-08-17-dgfip-breach-usurped-agent-and-third-party-logins-exposed.html2026-02-180.8weekly https://legacymfa.sucks/posts/2026-08-17-thehatman-lists-364m-entra-employee-dumps-tcs-filing-names.html2026-08-310.8monthly https://legacymfa.sucks/posts/2026-08-06-unc6671-vishing-stole-hedge-fund-mfa-sessions.html2026-08-220.8monthly https://legacymfa.sucks/posts/2026-08-07-five-week-vishing-harvested-mfa-codes-at-200-orgs.html2026-09-140.8weekly https://legacymfa.sucks/posts/2026-08-18-mirage2fa-aitm-stole-m365-mfa-and-session-cookies.html2026-08-200.8monthly https://legacymfa.sucks/posts/2026-08-06-payroll-pirates-aitm-users-finished-mfa-attackers-still.html2026-08-180.8weekly https://legacymfa.sucks/posts/2026-08-14-how-aitm-phishing-captured-a-live-microsoft-365-session-and.html2026-08-170.8monthly https://legacymfa.sucks/posts/2026-07-27-how-a-weak-employee-email-password-led-to-mass-file-theft.html2026-08-120.8monthly https://legacymfa.sucks/posts/2026-08-04-greatness-phaas-stole-mfa-approved-microsoft-365-tokens-via.html2026-08-120.8monthly