#microsoft


Authorities halt router attacks redirecting DNS to capture Microsoft 365 credentials.

Apr 7, 2026 // 18:57

An international effort involving law enforcement and private companies has stopped FrostArmada, an APT28 operation that hijacked local traffic from MikroTik and TP-Link routers to […]

Microsoft connects Medusa ransomware group’s affiliate to zero-day exploits.

Apr 6, 2026 // 19:57

According to Microsoft, Storm-1175, a Chinese financially motivated cybercriminal group known for using Medusa ransomware, is rapidly exploiting both known (n-day) and previously unknown (zero-day) […]

EvilTokens service aids Microsoft phishing; device code attacks rise.

Apr 1, 2026 // 23:37

A new harmful tool called EvilTokens uses device code phishing, letting hackers take over Microsoft accounts and offering sophisticated capabilities for business email hacking. This […]

Bubble AI app exploited, Microsoft credentials stolen.

Mar 26, 2026 // 09:37

Cybercriminals are bypassing phishing defenses in attacks targeting Microsoft users by exploiting the no-code development platform Bubble to create and host harmful web applications. Because […]

OAuth abuse enables device code phishing attacks, impacting over 340 Microsoft 365 organizations across five countries.

Mar 25, 2026 // 14:43

Cybersecurity experts are raising awareness about an ongoing phishing scheme using device codes to compromise Microsoft 365 accounts in over 340 organizations across the U.S., […]

Microsoft: IRS Phishing Attack Impacts 29K, Spreads RMM Malware

Mar 23, 2026 // 14:03

Microsoft is alerting users to new schemes that are exploiting the upcoming U.S. tax season to steal login information and spread malicious software. These email […]

CISA: Secure Microsoft Intune! Stryker Incident Highlights US Organizations’ Vulnerability.

Mar 19, 2026 // 14:17

Following a cyberattack where medical device company Stryker’s systems were wiped using a vulnerability in Microsoft Intune, CISA advised U.S. businesses to follow Microsoft’s guidelines […]

Microsoft has issued a quick Windows 11 update, applied without a reboot, to address a remote code execution security vulnerability in the Routing and Remote Access Service (RRAS).

Mar 17, 2026 // 21:16

To address security flaws, Microsoft has provided a special update (out-of-band or OOB) for Windows 11 Enterprise computers that utilize hotpatch updates, an alternative to […]

Microsoft Entra Passkeys Bring Phishing-Resistant Sign-ins to Windows

Mar 10, 2026 // 19:31

Microsoft has officially integrated phishing-resistant passkeys into the Windows sign-in experience via Microsoft Entra ID (formerly Azure AD). This move aims to eliminate the reliance on traditional passwords, which […]

Microsoft to Turn on Reboot-Free Windows Security Updates by Default

Mar 10, 2026 // 15:19

Starting with the May 2026 Windows security update, Microsoft will enable hotpatching by default for all eligible devices managed through Microsoft Intune and the Microsoft Graph API. This change shifts from […]

Previous 1 … 21 22 23 24 Next