Microsoft 365 users targeted in device code phishing attacksHelp Net Security·Dec 18, 00:00 UTC · Dec 18, 2025Phishing & fraud130
Approaching the Reverse Engineering of a RFID/NFC Vending MachineSecurity Affairs·Oct 16, 12:57 UTC · Oct 16, 2019Vulnerability30
Misconfigured Server Reveals Three Evilginx Phishing Operations Targeting Microsoft 365The Hacker News·Jul 15, 00:00 UTC · Jul 15, 2026Phishing & fraud130
The Exchange Online security controls organizations keep getting wrongHelp Net Security·May 18, 08:28 UTC · May 18, 2026Vulnerability130
Chinese Botnet Bypasses MFA in Microsoft 365 AttacksInfosecurity Magazine·Feb 25, 12:00 UTC · Feb 25, 2025Malware130
Microsoft hands Entra ID users new option for MFAHelp Net Security·Mar 25, 00:00 UTC · Mar 25, 2026Phishing & fraud30
A large botnet targets M365 accounts with password spraying attacksSecurity Affairs·Feb 24, 20:51 UTC · Feb 24, 2025Malware30
Beware the Hidden Risk in Your Entra EnvironmentThe Hacker News·Aug 2, 06:07 UTC · Aug 2, 2025Vulnerability130
Researchers warn of ongoing Entra ID account takeover campaignHelp Net Security·Jun 12, 00:00 UTC · Jun 12, 2025Threat actor45
Cybersecurity jobs available right now: April 8, 2026Help Net Security·Jul 10, 08:06 UTC · Jul 10, 2026Vulnerability30
Phishing campaign exploits OAuth redirection to bypass defensesSecurity Affairs·Mar 3, 11:51 UTC · Mar 3, 2026Threat actor45
The New Phishing Click: How OAuth Consent Bypasses MFAThe Hacker News·Jul 9, 15:38 UTC · Jul 9, 2026Phishing & fraud30
Sneaky 2FA Phishing Kit Adds BitB Pop-ups Designed to Mimic the Browser Address BarThe Hacker News·Nov 19, 08:39 UTC · Nov 19, 2025Phishing & fraud30
Russia-Linked Hackers Use Microsoft 365 Device Code Phishing for Account TakeoversThe Hacker News·Dec 30, 07:57 UTC · Dec 30, 2025Phishing & fraud130
EvilTokens ramps up device code phishing targeting Microsoft 365 usersHelp Net Security·Mar 31, 00:00 UTC · Mar 31, 2026Phishing & fraud130
Hijacked Hotel Wi-Fi Pushes Fake Updates to Deliver Surveillance MalwareThe Hacker News·Aug 1, 06:29 UTC · Aug 1, 2026Malware30
Cybersecurity jobs available right now: April 21, 2026Help Net Security·Aug 6, 12:16 UTC · Aug 6, 2026Vulnerability30
Microsoft Mandates MFA for All Azure SignInfosecurity Magazine·Aug 16, 14:00 UTC · Aug 16, 2024Phishing & fraud130
What is Shadow IT and why is it so risky?The Hacker News·Jun 30, 11:55 UTC · Jun 30, 2022Vulnerability30
Microsoft Warns IRS Phishing Hits 29,000 Users, Deploys RMM MalwareThe Hacker News·Mar 24, 04:17 UTC · Mar 24, 2026Malware30
Russian Hackers Exploit Microsoft OAuth to Target Ukraine Allies via Signal and WhatsAppThe Hacker News·Apr 30, 09:51 UTC · Apr 30, 2025Threat actor145
Attackers abuse OAuth apps to initiate large-scale cryptomining and spam campaignsHelp Net Security·Dec 13, 00:00 UTC · Dec 13, 2023Threat actor45
How attackers use and abuse Microsoft MFAHelp Net Security·Aug 24, 00:00 UTC · Aug 24, 2022Data breach45
Organizations are making email more secure, and it’s paying offHelp Net Security·Sep 25, 00:00 UTC · Sep 25, 2024Malware30
Russian APT29 conducts phishing attacks through Microsoft TeamsSecurity Affairs·Aug 3, 07:21 UTC · Aug 3, 2023Threat actor45
Large-scale AiTM phishing campaign targeted +10,000 orgs since 2021Security Affairs·Aug 24, 16:42 UTC · Aug 24, 2022Threat actor45
FBI Warns 'Kali365' Phishing Kit Hijacks Microsoft 365 OAuth TokensInfosecurity Magazine·May 25, 09:30 UTC · May 25, 2026Phishing & fraud30
Microsoft Maps Three Salesforce Attack Paths Tied to a Year of ShinyHunters ActivityThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2026Ransomware45
Microsoft Entra pushes passkeys, tightens identity securityHelp Net Security·Jun 2, 00:00 UTC · Jun 2, 2026Threat actor145
Moroccan Cybercrime Group Steals Up to $100K Daily Through Gift Card FraudThe Hacker News·May 28, 04:27 UTC · May 28, 2024Phishing & fraud30
Trust in Remote Working Tools Declines as Need for Security IncreasesInfosecurity Magazine·Oct 21, 16:00 UTC · Oct 21, 2020Vulnerability30
Microsoft warns of global campaign stealing auth tokens from 35K usersSecurity Affairs·May 5, 09:10 UTC · May 5, 2026Threat actor45
Greatness PhaaS Adds Device Code Phishing to Bypass MFA and Steal TokensThe Hacker News·Aug 5, 08:52 UTC · Aug 5, 2026Phishing & fraud130
Microsoft Warns of Hackers Exploiting OAuth for Cryptocurrency Mining and PhishingThe Hacker News·Dec 15, 00:00 UTC · Dec 15, 2023Phishing & fraud30
LogoKit Phishing Kit Screenshots Victim Sites in Real TimeInfosecurity Magazine·Jul 29, 16:00 UTC · Jul 29, 2026Phishing & fraud30