Aug 272026 NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions NovaCookies proxies Microsoft 365 sign-ins through attacker infrastructure to steal sessions using Docusign lures and OAuth redirects.