A critical vulnerability was discovered in the Microsoft Authenticator app for Android smartphones. If a malicious app was ...

If you have ever waited for a login code that never showed up, you already know the pain. You type in your password. Microsoft asks for a code. Then you stare at your ...

A hidden security risk could leave businesses exposed long after the original breach is contained.

Multiple Russian nation-state actors are targeting sensitive Microsoft 365 accounts via device code authentication phishing, a new analysis by Volexity has revealed. The firm first observed this ...

Microsoft 365 is under attack, China and Russia afflited hackers suspected. Updated December 23 with advice from a mobile security solutions expert regarding the Russian device code attacks targeting ...

The Tycoon2FA phishing kit now supports device-code phishing attacks and abuses Trustifi click-tracking URLs to hijack Microsoft 365 accounts. Despite an international law enforcement operation ...

Attackers replayed stolen Microsoft 365 tokens to compromise 97 accounts at 79 organizations and registered 48 rogue Entra ...

Cybercriminals are abusing Microsoft's Trusted Signing platform to code-sign malware executables with short-lived three-day certificates. Threat actors have long sought after code-signing certificates ...

Security researchers report a notable increase in device code phishing activity aimed at Microsoft 365 users, and have attributed this rise to the availability of EvilTokens, a new, specialized ...

An attacker used stolen sessions to break into Microsoft 365 accounts at 79 organizations, bypassing MFA and setting up ...

Skyw4lker targets U.S. firms with device code phishing that abuses Microsoft 365 authentication to obtain account access ...