A threat actor is targeting organizations across multiple sectors in voice-enabled attacks involving Microsoft 365 phishing ...

A new phishing-as-a-service (PhaaS) operation called Forg365 focuses on stealing Microsoft 365 accounts by combining ...

Talos details ARToken, a PhaaS panel tied to EvilTokens that supports device code phishing, BEC workflows, SharePoint theft, ...

The FBI used a Microsoft device identifier, dubbed GDID, to link a teenager to a hack attributed to Scattered Spider, raising ...

A coding mistake in several Microsoft 365 Android applications resulted in the exposure of user accounts to compromise at massive scale, demonstrating once again how dropping the ball on securing ...

Soon, your coworkers in Microsoft Teams might not all be human. Scout, an always-on AI agent announced at Microsoft’s Build developer conference on Tuesday, can go through your work messages, calendar ...

The FBI is warning that a new hacking platform is allowing cybercriminals to hijack Microsoft 365 accounts — including Outlook, Teams and OneDrive — while bypassing multi-factor authentication ...

Kali365 phishing attacks bypass Microsoft 365 MFA by stealing access tokens. Real Microsoft device sign-in pages make Kali365 phishing lures harder to detect. Defenders should restrict device code ...

The security measure millions rely on to protect their accounts may not be as foolproof as they think. At the center of the scheme is a hacking platform called Kali365. Unlike traditional phishing ...

The FBI warned on May 21 that cybercriminals are increasingly targeting Microsoft 365 users with sophisticated phishing scams. The scam uses a tool called “Kali365” to steal account access tokens and ...

Microsoft is phasing out SMS as an authentication method. SMS messages are unencrypted and vulnerable to hackers. Microsoft account owners will be prompted to set up a passkey instead. When trying to ...

For months, scammers have been taking advantage of a loophole that allows them to send spammy emails from an internal Microsoft email address typically used for sending legitimate account alerts. It’s ...