The attack abused misconfigured conditional access policies to bypass multi-factor authentication protections.

ConsentFix and ClickFix attacks steal Microsoft 365 tokens in seconds using fake prompts and OAuth flows. Learn how these MFA ...

The FBI warns about Kali365, a phishing scam targeting Microsoft 365 accounts that can bypass multifactor authentication ...

A coding mistake in several Microsoft 365 Android applications resulted in the exposure of user accounts to compromise at massive scale, demonstrating once again how dropping the ball on securing ...

Soon, your coworkers in Microsoft Teams might not all be human. Scout, an always-on AI agent announced at Microsoft’s Build developer conference on Tuesday, can go through your work messages, calendar ...

The FBI is warning that a new hacking platform is allowing cybercriminals to hijack Microsoft 365 accounts — including Outlook, Teams and OneDrive — while bypassing multi-factor authentication ...

The FBI warned on May 21 that cybercriminals are increasingly targeting Microsoft 365 users with sophisticated phishing scams. The scam uses a tool called “Kali365” to steal account access tokens and ...

Microsoft is phasing out SMS as an authentication method. SMS messages are unencrypted and vulnerable to hackers. Microsoft account owners will be prompted to set up a passkey instead. When trying to ...

For months, scammers have been taking advantage of a loophole that allows them to send spammy emails from an internal Microsoft email address typically used for sending legitimate account alerts. It’s ...

Scammers have found a way to weaponize an official Microsoft email address in order to spread their cyber crimes. Credit: Samuel Boivin/NurPhoto via Getty Images If you've ever received an email from ...

GitHub confirmed on May 20 that a poisoned VS Code extension installed on an employee’s device gave attackers access to roughly 3,800 internal repositories at the Microsoft-owned code storage and ...

Microsoft is phasing out SMS-based two-factor authentication (2FA) and SMS one-time passwords (OTPs) for personal Microsoft accounts. Calling SMS-based logins "a leading source of fraud," the company ...