New Microsoft accounts will be "passwordless by default"Help Net Security·May 2, 00:00 UTC · May 2, 2025Vulnerability30
Microsoft Entra ID is removing an extra MFA hurdle for Windows Hello and macOS PSSO usersHelp Net Security·Aug 10, 00:00 UTC · Aug 10, 2026Phishing & fraud130
CVE-2019-9510 flaw allows hackers to bypass Windows lock screen on RDP sessionsSecurity Affairs·Jun 4, 21:02 UTC · Jun 4, 2019VulnerabilityCVE-2019-951035
Microsoft releases out-ofSecurity Affairs·Nov 23, 10:28 UTC · Nov 23, 2022VulnerabilityCVE-2022-3796635
Russian hackers hijack hotel Wi-Fi networks to spy on travelers, Microsoft saysThe Record·Aug 3, 12:21 UTC · Aug 3, 2026Malware30
New Phishing-as-a-Service Platform Lets Cybercriminals Generate Convincing Phishing PagesThe Hacker News·May 15, 00:00 UTC · May 15, 2023Phishing & fraud30
Hackers Abused Microsoft's "Verified Publisher" OAuth Apps to Breach Corporate Email AccountsThe Hacker News·Feb 1, 09:36 UTC · Feb 1, 2023Threat actor45
Microsoft Warns of Adversary-in-theInfosecurity Magazine·Aug 29, 10:50 UTC · Aug 29, 2023Threat actor45
New Tricks in the Phishing Playbook: Cloudflare Workers, HTML Smuggling, GenAIThe Hacker News·May 28, 04:30 UTC · May 28, 2024Phishing & fraud30
Man-in-the-Middle Phishing AttackSchneier on Security·Aug 25, 11:45 UTC · Aug 25, 2022Phishing & fraud30
Attackers use encrypted RPMSG messages in Microsoft 365 phishing attacksSecurity Affairs·May 29, 07:16 UTC · May 29, 2023Phishing & fraud130
Recent ‘MFA Bombing’ Attacks Targeting Apple UsersKrebs on Security·Apr 2, 20:30 UTC · Apr 2, 2024Threat actor45
How attackers target and exploit Microsoft Exchange serversHelp Net Security·Jun 25, 00:00 UTC · Jun 25, 2020VulnerabilityCVE-2020-068835
Threat Spotlight: Cyber Criminal Adoption of IPFS for Phishing, Malware CampaignsCisco Talos·Nov 9, 13:00 UTC · Nov 9, 2022Malware30
Russian Hackers Exploit Microsoft OAuth to Target Ukraine Allies via Signal and WhatsAppThe Hacker News·Apr 30, 09:51 UTC · Apr 30, 2025Threat actor145
EvilTokens ramps up device code phishing targeting Microsoft 365 usersHelp Net Security·Mar 31, 00:00 UTC · Mar 31, 2026Phishing & fraud130
ARToken: Inside an EvilTokens affiliate panel targeting Microsoft 365Cisco Talos·Jul 1, 10:00 UTC · Jul 1, 2026Threat actor145
Microsoft Entra pushes passkeys, tightens identity securityHelp Net Security·Jun 2, 00:00 UTC · Jun 2, 2026Threat actor145
Teams-Themed Phishing Campaign Abused Legitimate Microsoft Login PagesInfosecurity Magazine·Jul 30, 12:00 UTC · Jul 30, 2026Threat actor145
Abusing Two-factor authentication to steal money from Instagram, Google and MicrosoftSecurity Affairs·Sep 2, 10:06 UTC · Sep 2, 2017Vulnerability30
New phishing-as-a-service tool “Greatness” already seen in the wildCisco Talos·May 10, 12:00 UTC · May 10, 2023Phishing & fraud30
Microsoft enforces defenses preventing NTLM relay attacksHelp Net Security·Dec 11, 00:00 UTC · Dec 11, 2024VulnerabilityCVE-2024-21413CVE-2023-23397CVE-2023-3656335
"Greatness" Phishing Tool Exploits Microsoft 365 CredentialsInfosecurity Magazine·May 11, 16:30 UTC · May 11, 2023Phishing & fraud30
Microsoft says MFA adoption remains low, only 22% among enterprise customersThe Record·Jan 17, 00:00 UTC · Jan 17, 2023Vulnerability30
Microsoft 365 email senders urged to implement SPF, DKIM and DMARCHelp Net Security·Oct 9, 00:00 UTC · Oct 9, 2023Phishing & fraud30
Is Single Sign-On Enough to Secure Your SaaS Applications?The Hacker News·May 20, 10:21 UTC · May 20, 2021Vulnerability30
New Apple privacy features announced at WWDC 2021The Record·Dec 8, 00:00 UTC · Dec 8, 2022Vulnerability30
Hijacked Hotel Wi-Fi Pushes Fake Updates to Deliver Surveillance MalwareThe Hacker News·Aug 1, 06:29 UTC · Aug 1, 2026Malware30
The ARToken phishing panel targets Microsoft 365 accountsHelp Net Security·Jul 1, 00:00 UTC · Jul 1, 2026Phishing & fraud130
Stealing Windows credentials using Google ChromeHelp Net Security·May 15, 00:00 UTC · May 15, 2017Vulnerability30
Threat actors weaponize OAuth redirection logic to deliver malwareHelp Net Security·Mar 3, 00:00 UTC · Mar 3, 2026Malware30
New Project CAV3RN .NET Native AOT communication moduleKaspersky Securelist·Jul 22, 15:43 UTC · Jul 22, 2026Vulnerability30
Attackers target retailers’ gift card systems using cloud-only techniquesHelp Net Security·Oct 22, 00:00 UTC · Oct 22, 2025Vulnerability30
Rule release for today, Tuesday April 13th, 2010Cisco Talos·Apr 13, 20:23 UTC · Apr 13, 2010Vulnerability30
Expert published PoC exploit code for Kerberos Bronze Bit attackSecurity Affairs·Dec 10, 18:23 UTC · Dec 10, 2020Exploit / PoCCVE-2020-1704950
Russian Hackers Breach 20+ NGOs Using Evilginx Phishing via Fake Microsoft Entra PagesThe Hacker News·May 27, 16:08 UTC · May 27, 2025Phishing & fraud30
Phishing Dominates as Initial Entry Method for CyberInfosecurity Magazine·Jul 28, 13:00 UTC · Jul 28, 2026Phishing & fraud130
Microsoft changes signing key system breached by Chinese hackers to steal US gov’t dataThe Record·Jul 14, 20:51 UTC · Jul 14, 2023Data breach45