Attackers replayed stolen Microsoft 365 tokens to compromise 97 accounts at 79 organizations and registered 48 rogue Entra ...

Security researchers identified attempts to access corporate networks which have been linked to a major Microsoft 365-targeted BEC campaign using phishing, stolen session tokens and social engineering ...

A Dutch security researcher has published an indepth analysis of a critical vulnerability that could have allowed attackers to compromise every Microsoft Entra ID tenant worldwide through a ...

Microsoft Entra’s October 2026 update adds stronger access controls, simpler identity management, and security features for AI-ready enterprises.

Cybercriminals penetrated Microsoft 365 accounts at 79 organisations during a coordinated campaign involving stolen authentication tokens phishing and ...

An attacker used stolen sessions to break into Microsoft 365 accounts at 79 organizations, bypassing MFA and setting up ...

A new phishing kit abuses a legitimate Microsoft device authorization flow intended for use with printers or smart TVs to steal authentication tokens, register attacker-controlled devices and gain ...

Microsoft this week announced a new policy for compelling reauthentications for organizations using the Microsoft Entra Conditional Access service. The new policy, called "sign-in frequency -- every ...

A new generation of phishing toolkits promise fraudsters an easier path to skirting multifactor authentication and roping in more victims using the power of automation. See Also: Securing AI at Scale, ...