A typosquatted domain impersonating the Microsoft Activation Scripts (MAS) tool was used to distribute malicious PowerShell ...

Microsoft is bringing synced passkeys and biometrics for Entra ID account recovery to public preview, as the company leans ...

The surge in attempts to compromise Microsoft 365 accounts has been enabled by readily available phishing tools.

Cybercriminals have launched a widespread phishing campaign exploiting Microsoft's OAuth device code flow to bypass MFA and ...

The Nigeria Police Force National Cybercrime Centre (NPF-NCCC) has arrested high-profile cybercrime suspects connected to sophisticated Microsoft 365 phishing attacks targeting major corporate ...

Cybercriminals have quietly turned a small, easy-to-miss mistake into a highly effective way to drain Microsoft accounts, ...

Microsoft is finally ripping out one of the weakest links in its identity stack, cutting off a legacy cipher that attackers ...

Check Point explains that this new technique “tricks people into giving attackers access to their Microsoft accounts. The ...

Learn why modern SaaS platforms are adopting passwordless authentication to improve security, user experience, and reduce breach risks.

What’s new in a ConsentFix attack is that the attack happens entirely inside a browser, say the researchers, which removes one of the key detection opportunities because the attack doesn’t touch an ...

Your Microsoft or non-Microsoft-related accounts include content that’s important to you. So, finding yourself suddenly locked can be incredibly frustrating. Even more so when the account has your ...