protobuf.js RCE can trigger arbitrary JS execution when apps load attacker influenced schemas. Patch to 8.0.1 or 7.5.5.🟡 Tycoon 2FA crews are leaning into device code phishing to steal sessions and bypass MFA. Reinforce user training and conditional access.#CyberSecurity #ThreatIntel #AppSec #IdentitySecuritysolomonneas.dev/intel