If you sign in to Microsoft 365 at work, your password is no longer the only thing standing between your inbox and an ...

A new phishing kit abuses a legitimate Microsoft device authorization flow intended for use with printers or smart TVs to steal authentication tokens, register attacker-controlled devices and gain ...

An attacker used stolen sessions to break into Microsoft 365 accounts at 79 organizations, bypassing MFA and setting up ...

Microsoft Copilot now centers on Home, Code, and Autopilot. See what each feature does, availability, previews, and how usage-based billing works.

Attackers are targeting Microsoft 365 users with device code authorization phishing, a technique that fools users into approving access tokens, Proofpoint warns. The method abuses Microsoft’s OAuth ...

New data from Barracuda Networks shows device code phishing is on the rise with seven million attacks detected in just four weeks. The EvilTokens phishing kit is driving this surge, targeting ...

Individuals in North America and Asia, especially those in the technology, manufacturing, and finance industries, were subjected to a widespread QR code phishing campaign that sought to exfiltrate ...

Microsoft’s new Copilot is a major shift in how AI functions across Windows. The assistant is being unified and simplified as the core of Microsoft’s long‑term AI strategy.

A new phishing-as-a-service (PhaaS) platform called ONNX Store is targeting Microsoft 365 accounts for employees at financial firms using QR codes in PDF attachments. The platform can target both ...