Cyber CrimeNewForg365 and the Industrialization of Account Takeover Tactics
A Telegram-based phishing service is lowering barriers to entry for M365 attacks by automating complex bypass and exfiltration workflows.
> Search
22 results for “microsoft”
Cyber CrimeNew
SecurityNewBeyond Credentials: The Year Salesforce Was Used Against Itself
Microsoft details how threat actors bypassed traditional defenses to compromise Salesforce environments via OAuth and guest access.
SecurityRedmond Patches RoguePlanet Zero-Day Amidst Ongoing Researcher Conflict
Microsoft has addressed the RoguePlanet vulnerability, ending a contentious saga with security researcher Nightmare Eclipse.
SecurityGigaWiper: The Modular Threat Merging Espionage With Total Destruction
Microsoft identifies a sophisticated new backdoor, GigaWiper, which stitches together existing malware to facilitate targeted data destruction.
SecurityMicrosoft Halts Secure Boot Updates Amid Hardware Compatibility Issues
A critical firmware certificate rollout has been paused for specific Windows 11 devices following reports of update failures.
SecurityGigaWiper Convergence: A New Era of Modular Destructive Backdoors
Microsoft identifies a sophisticated new malware strain that fuses espionage and permanent data destruction into a single, unified tool.
Cyber CrimeTravel Sector Under Siege as TA558 Pivots Toward Stealthy Payloads
Threat actors are weaponizing reservation-themed emails with container files to bypass modern Microsoft Office security protections.
SecurityZero-Day Escalation Highlights Critical Defender Exposure
A recently disclosed proof-of-concept exploit targeting Windows Defender brings renewed focus to the fragility of enterprise security software.
SecurityThe AI-Driven Escalation of Patch Tuesday Demands
Microsoft anticipates a surge in security updates as AI-accelerated vulnerability discovery becomes the new industry standard.
SecurityA Tidal Wave of Patches Signals a New Era of Software Risk
Microsoft's latest record-breaking security cycle highlights the mounting pressures of AI-driven vulnerability discovery and exploitation.
Tech NewsMicrosoft Enlists Copilot AI to Demystify Windows System Settings
Microsoft is introducing the PC Insights skill to its Copilot app, allowing users to query system data without digging through menus.
Tech NewsWindows 11 Gains AI Diagnostics at the Cost of System Overhead
Microsoft introduces 'PC insights' to help users query hardware stats via Copilot, sparking new debates over privacy and resource usage.
SecurityCloud Authentication Under Siege: The Rise of OAuth ID Spoofing
A stealthy new attack technique is bypassing traditional security logs, allowing threat actors to compromise cloud-based infrastructure.
Cyber CrimeForg365 PhaaS Escalates Microsoft 365 Account Takeover Risks
A new subscription-based phishing service leverages device code theft and AI to bypass traditional security defenses.
Cyber CrimeA Misconfigured Server Unlocks Three-Actor Phishing Ecosystem
A single exposed directory reveals how multiple threat actors leverage AiTM tools and OAuth abuse to compromise corporate accounts.
SecurityGigaWiper: A Swiss Army Knife of Digital Destruction
Microsoft identifies a sophisticated new Windows backdoor that merges multiple ransomware and data-wiping tools into one modular threat.
SecurityThe MFA Illusion: How One Open Server Exposed Next-Gen Phishing
A simple configuration blunder by an attacker unraveled three sophisticated, bypass-capable phishing campaigns targeting Microsoft 365.
SecurityHow Vulnerable BitLocker Wrappers Threaten Global Cash Networks
Security weaknesses in Microsoft BitLocker wrappers could expose corporate networks and cash machines to deep physical compromise.
Cyber CrimeRansomware’s Stealthy Ascent: Microsoft-Signed Driver Bypasses Defenses
GodDamn ransomware now exploits PoisonX, a Microsoft-signed kernel driver, to disable endpoint security, marking a critical escalation in evasion tactics.
Tech NewsMicrosoft Sunsets OWA Light, Prompting IT Modernization
Microsoft is phasing out its two-decade-old Outlook Web Access Light client, urging users and administrators to transition to the full Outlook on the web experience by August 2026.
Cyber CrimeAI-Powered Phishing Toolkit Lowers Barrier for Sophisticated Cyberattacks
Forg365, a sophisticated phishing-as-a-service platform, now combines AI-assisted lure generation with advanced AiTM and device code methods to compromise Microsoft 365 accounts and maintain persistent access.
SecurityMicrosoft's AI Push: A New Era of More Frequent Windows Security Patches
Microsoft's increasing reliance on advanced artificial intelligence to proactively uncover vulnerabilities within its Windows codebase is set to significantly raise the volume of monthly security updates for users.