ABT Blog

Read about mortgage technology solutions topics

phishing (2)

Phishing-resistant MFA for financial institutions: hardware-backed FIDO2 security keys, passkeys, and Microsoft Entra ID Conditional Access protecting against AiTM, credential theft, and phishing attacks

16 min read

Phishing-Resistant MFA for Financial Institutions: Why FFIEC, NCUA, and OCC Examiners Now Expect FIDO2, Passkeys, and Hardware Keys

Justin Kirsch: Sat, May 02, 2026

In This Article What "Phishing-Resistant" Authentication Actually Means Why SMS, Push, and One-Time Codes No Longer Pass the Bar What FFIEC Examiners...

phishing multi-factor authentication cybersecurity FFIEC microsoft Data Protection MFA Compliance

Microsoft-branded hero image for ABT blog article: Code of Conduct AiTM Phishing: How 35,000 Users in 13,000 US Organizations Were Compromised in 72 Hours - What Banks, Credit Unions, and Mortgage Companies Must Verify Now. Banks, credit unions, and mortga

18 min read

Code of Conduct AiTM Phishing: How 35,000 Users in 13,000 US Organizations Were Compromised in 72 Hours - What Banks, Credit Unions, and Mortgage Companies Must Verify Now

Justin Kirsch: Sat, May 02, 2026

In This Article What Happened: 72 Hours, 35,000 Users, 13,000 Organizations Why a Code of Conduct Lure Works on Financial Institution Users The...

phishing mortgage industry

VENOM PhaaS QR code AiTM phishing attack targeting financial institution executives

15 min read

VENOM PhaaS: MFA Bypass Targeting Financial Executives

Justin Kirsch: Sat, Apr 25, 2026

In This Article What Is VENOM? The QR Code That Email Security Cannot See The Attack Chain: From Inbox to Persistent Access Why Standard MFA Does Not...

phishing MFA Compliance

Microsoft Teams helpdesk impersonation 9-stage attack chain targeting financial institutions

15 min read

Microsoft Teams Helpdesk Impersonation: The 9-Stage Attack Chain Targeting Financial Institutions

Justin Kirsch: Fri, Apr 24, 2026

In This Article The Attack Nobody Patches For How the 9-Stage Intrusion Works Why Financial Institutions Face Elevated Risk What Guardian Configures...

phishing cybersecurity mortgage industry Microsoft 365

Microsoft 365 device code phishing attack pathway showing token replay from Railway PaaS infrastructure to a compromised financial institution tenant

25 min read

M365 Device Code Phishing: MFA Is Being Bypassed at Scale

Justin Kirsch: Wed, Apr 15, 2026

In This Article The attack that bypasses MFA without breaking it How EvilTokens weaponized a legitimate OAuth feature The escalation timeline: from 3...

phishing cybersecurity MFA Compliance Microsoft 365

Prev 1 2