Druva adds backup and recovery for Copilot Studio agents
Power Apps support and a Microsoft 365 Copilot backup agent are generally available; Azure SRE Agent integration comes at the end of November.
1
Stories per day · 30 days
14 RSS
Relatedconnectwise28supply-chain16cloud-backup14artex12storm-094012oauth11msp9entra-id8phishing8entra7password-spraying6aitm5credential-theft5device-code-phishing5skykick5business-email-compromise4identity4cisa3
128 stories, newest first · one card per story
Stories tagged #microsoft-365
SkyW4lker phishing kit abuses Microsoft 365 device-code flow for account takeovers
SkyW4lker has tracked 618 sandbox analyses since June 2026 with nearly half from the United States targeting Microsoft 365 sessions.
SkyW4lker phishing kit abuses Microsoft device-code authentication
SkyW4lker, GeorgeGinx and Mir0Auth compromise Microsoft 365 accounts via legitimate device-code flows in October 2026.
3
Canadian help-desk vishing campaign bypasses MFA in real time
Callers send staff to branded relay pages, then register MFA methods and steal Microsoft 365 data before extortion.
1
Microsoft urges CISOs to govern AI agents as adoption surges
Microsoft says active agents in Microsoft 365 grew 15-fold year over year, and 18-fold in large enterprises.
Veeam backup products affected by vulnerabilities ahead of fixes
The Canadian Cyber Centre lists affected builds of Agent for Linux, Backup and Replication, Backup for Microsoft 365 and Veeam ONE.
Whitsett, NC warns of phishing from compromised town email
On October 22 the town found its Microsoft 365 account had sent a fake payment report with two attachments and a PDF password.
1
Skyw4lker device-code phishing targets US Microsoft 365 accounts
Password-protected contract lures and Google Sites lead victims into a real Microsoft login that hands over tokens.
2
CISA releases ScubaGear 2.0 and ScubaGoggles 1.1.0
ScubaGear now calls Microsoft 365 REST APIs directly, and ScubaGoggles adds an assured baseline plus Gemini controls.
CISA offers free ScubaGear and ScubaGoggles cloud configuration assessment tools
ScubaGear checks Microsoft 365 with PowerShell and Rego; alpha ScubaGoggles may misreport Google Workspace settings.
CISA’s ScubaGear and ScubaGoggles check cloud security settings
The existing SCuBA tools report configuration gaps in Microsoft 365 and Google Workspace but do not change tenant settings.
SkyW4lker phishing kit abuses Microsoft 365 device-code login
ANY.RUN linked 618 analyses from June through October 21, 2026, with monthly cases rising from 20 to 200.
1
Stolen login tokens used to hijack Microsoft 365 accounts at 79 organizations
Huntress counted 497 successful sign-ins and more than 200,000 failures from July 14 to September 22, 2026.
1
Token replay gave attackers Microsoft 365 access at 79 organizations
Huntress logged 497 successful sign-ins and over 200,000 failures from July 14 to September 22, 2026.
2
Storm-0940 targeted 2,250 Microsoft 365 tenants with stolen ConnectWise credentials
Microsoft says the ARTEX agent framework drove the campaign; Huntress rates the AI claim lower from its own telemetry.
1
Storm-0940 abused ConnectWise backup credentials in Microsoft 365
Microsoft says more than 2,250 tenants were targeted; Huntress confirmed hundreds of sign-ins but not data theft or ARTEX use.
1
Microsoft restores Teams after US disruption tracked as TM1526111
Automatic scaling returned throughput to healthy levels on October 26, but Microsoft has not named the trigger, user count or affected features.
1
Opinion: EvilTokens shows AI speeding Microsoft 365 device-code phishing
Microsoft said it disrupted Storm-2992 in September after the service, found in February, used AI across the chain.
1
Microsoft 365 token-replay campaign hit 97 accounts at 79 organizations
Huntress logged 497 successful sign-ins and 48 rogue Entra devices between July 14 and September 22, 2026.
1
Android Authenticator flaw let apps steal work tokens
An installed app with no permissions could impersonate Teams and obtain Graph tokens; fixed in 6.2606.4246.
1
Microsoft Teams to get AI-powered, context-aware phishing detection
Admins need not enable it, and Microsoft says message content is not kept for model training.
1
Stolen Microsoft 365 sessions replayed at 79 organizations
Huntress counted 497 successful sign-ins and over 200,000 failures from July 14 to September 22, with inbox rules hiding mail.
1
Storm-0940 used AI tool Artex in ConnectWise customer intrusions
Microsoft logged more than 151,000 failed logons and successful sign-ins with ConnectWise cloud application identities.
2
Token-spraying campaign hits Microsoft 365 accounts for email fraud
Huntress counted at least 200,000 login attempts and 497 successful sign-ins from July to September 2026.
1