THREATNOIR
SOC & Threat Hunting
Daily briefings + IOCs you can operationalize fast.
CISOs & Leaders
Board-ready context and weekly risk signal.
Learners
Learn from real incidents, not hypotheticals.
Builders
APIs, MCP, and automation-ready threat intel.
Feed
Briefs IOCs Legal
Podcast Weekly Roundup Reviews
Tips & Tricks Awareness Red vs Blue Show Events Resources
Developer
Subscribe
Log in
Back to show
Red vs Blue Show

Vishing and SSO Abuse Fuel SaaS Extortion

May 3, 2026 · 1:40

Attackers use vishing to compromise helpdesk staff, then exploit SSO trust relationships to rapidly pivot across federated SaaS platforms and exfiltrate da…

X

Watch next

cPanel Auth Bypass Hits 1.5 Million Servers
1:40

cPanel Auth Bypass Hits 1.5 Million Servers

May 1, 2026

SAP npm Packages Hijacked to Steal Secrets
1:40

SAP npm Packages Hijacked to Steal Secrets

Apr 30, 2026

BlueNoroff Weaponizes Deepfake Zoom Calls Against Crypto Execs
1:40

BlueNoroff Weaponizes Deepfake Zoom Calls Against Crypto Execs

Apr 29, 2026

Popular PyPI Package Hijacked via GitHub Actions
1:40

Popular PyPI Package Hijacked via GitHub Actions

Apr 28, 2026

Entra Agent ID Flaw Hands Over Entire Tenants
1:40

Entra Agent ID Flaw Hands Over Entire Tenants

Apr 27, 2026

Snow Malware Blows In Through Teams Chat
1:40

Snow Malware Blows In Through Teams Chat

Apr 26, 2026

Wormable npm Malware Crawls the Supply Chain
1:40

Wormable npm Malware Crawls the Supply Chain

Apr 25, 2026

Vercel Breach Spreads Beyond Initial Blast Radius
1:40

Vercel Breach Spreads Beyond Initial Blast Radius

Apr 24, 2026

Dead Routers Walk: Mirai Feasts on D-Link
1:40

Dead Routers Walk: Mirai Feasts on D-Link

Apr 23, 2026

THREATNOIR

© 2026 ThreatNoir. All rights reserved.

FeedBriefsIOCsPodcastWeekly RoundupTipsAwareness LessonsResourcesDeveloperLegalContact
System status: nominal