Digital Warfare Podcast Daily Brief #136 July 27, 2026

The Digital Warfare Podcast · Jul 27, 2026 · 3m · transcript

Summary

Threat actors are compromising public Wi-Fi gateways at hotels, conference centres, and other shared venues to redirect Microsoft 365 authentication traffic through attacker-controlled infrastructure. Rather than relying on phishing emails or malware, the campaign exploits trusted network services to obtain credentials and authenticated sessions.

The primary organisational risk is identity compromise through manipulated DNS responses and abuse of Microsoft's device-code authentication flow. Organisations should prioritise always-on full-tunnel VPN deployment, review authentication…