Microsoft 365 Security
The latest Microsoft 365 Security coverage — news, analysis, and updates from the WindowsNews.AI desk.
Russian Cyber-Espionage Targets Ukrainian NGOs with OAuth Attacks on Microsoft 365
In the ever-evolving landscape of cyber warfare, a disturbing trend has emerged targeting Ukrainian non-governmental organizations (NGOs) through sophisticated OAuth attacks as part of Russian...
Russian Hackers Exploit OAuth to Target Ukraine NGOs via Microsoft 365
In a chilling reminder of the persistent dangers lurking in the digital realm, Russian threat actors have been reported to exploit OAuth vulnerabilities to compromise Microsoft 365 accounts,...
Securing Microsoft 365: Combatting Social Engineering and OAuth Threats in 2023
In an era where digital transformation has become the backbone of business operations, Microsoft 365 stands as a cornerstone for millions of organizations worldwide, powering productivity through...
Tycoon2FA Phishing Kit Targets Microsoft 365: Bypassing MFA Security
In the ever-evolving landscape of cyber threats, a new and sophisticated phishing kit known as Tycoon2FA has emerged, targeting Microsoft 365 users with alarming precision. Designed to bypass...
QR Code Phishing: How Cybercriminals Are Targeting Microsoft 365 Users
Cybercriminals are increasingly using QR codes as a new vector for phishing attacks targeting Microsoft 365 credentials. This sophisticated tactic bypasses traditional email security filters by...
Microsoft 365 BEC Attacks Surge: How Hackers Exploit Collaboration Tools
For Microsoft 365's 345 million global users, the familiar ping of an email notification now carries unprecedented risk. A new wave of Business Email Compromise (BEC) attacks is exploiting the...
ConnectWise Enhances Asio Platform to Empower Managed Service Providers
ConnectWise has unveiled significant enhancements to its Asio platform, aiming to provide Managed Service Providers (MSPs) with a unified, secure, and streamlined toolkit. These developments focus on...
Microsoft 365 OAuth Phishing: Key Threats and Zero Trust Defenses
Microsoft 365 has become a prime target for cybercriminals leveraging OAuth phishing attacks, a sophisticated form of credential theft that bypasses traditional security measures. These attacks...
Druva-Microsoft deal slashes breach costs with Azure-native backup resilience
In the rapidly evolving landscape of cloud computing, the strategic alliance between Druva and Microsoft marks a pivotal shift in how enterprises approach data protection. Announced in late 2023,...
AuthQuake MFA bypass flaw threatens 400M Office 365 accounts with immediate patch required
A newly discovered critical vulnerability dubbed 'AuthQuake' has exposed over 400 million Microsoft Office 365 accounts to potential compromise, raising alarms across the cybersecurity community....