On December 11, 2025, Push Security published research detailing a newly observed browser-based phishing technique called ConsentFix. The name ConsentFix is derived from its similarity to the previously documented ClickFix technique using fake CAPTCHA pages.  ConsentFix, enables threat actors to gain cloud account access without capturing passwords, multifactor...