The phishing-as-a-service toolkit leverages legitimate authentication to capture tokens and access Microsoft 365 services.
A global phishing campaign targeting Microsoft 365 bypasses security codes using a legitimate login feature, impacting ...
Microsoft is deepening its AI security ecosystem with new integrations alongside Commvault, Rubrik, XBOW, UiPath, and RSA ...
Device code phishing targets 340+ Microsoft 365 orgs since Feb 2026 via OAuth abuse, enabling persistent token hijacking and ...
Microsoft and HID have partnered to simplify multi-factor authentication (MFA) for enterprise employees by using HID physical access cards. Microsoft and HID, a leading identity solutions company, ...
Being locked out of your Microsoft 365 administrator account can be a stressful experience, as it prevents you from managing users and services. This typically occurs due to security features, such as ...
A new phishing-as-a-service (PhaaS) platform named 'Rockstar 2FA' has emerged, facilitating large-scale adversary-in-the-middle (AiTM) attacks to steal Microsoft 365 credentials. Like other AiTM ...
Microsoft 365 adds granular OneDrive and SharePoint restore, retires one-time passcodes for sharing, and updates Intune ...