Phishing Resistant Mfa

Check Point reports a fast-growing phishing campaign that abuses legitimate calendar features — malicious .ics attachments and fake Microsoft Teams invites — to steal Microsoft 365 credentials, with more than 302,386 unique phishing emails hitting over 40,000 organizations and volume climbing from a few thousand a month in April to more than 740,000 in the first two weeks of October. This is not a flaw in Outlook, Teams or the .ics format; it is the abuse of trusted calendar behaviour. A third-party, figures-attributed read of what the campaign is, why calendar invites bypass normal phishing instincts, and the defensive playbook for security leaders. Every number is attributed to Check Point.

A CISO and IAM architect's guide to FIDO2, WebAuthn, and passkeys: why they are phishing-resistant, platform vs hardware and device-bound vs synced options, attestation and AAGUID, and an assessment checklist for deployment.