SecurityTeams Adds Deepfake Detection to Calls
Microsoft says third-party deepfake detection and impersonation warnings will hit Teams meetings worldwide in November.
> Search
21 results for “microsoft 365”
Security
Cyber CrimeNikkei Email Breaches Expose 1,646 People
Nikkei says attackers hit a Google Workspace account in July and a Microsoft 365 account in September, later sending 9,000 phishing emails.
Cyber CrimeAntino Backdoor Hides C2 in Outlook, OneDrive
A China-nexus actor is using Microsoft 365 mailboxes and cloud storage as dead drops to command a Rust-compiled Windows backdoor, Talos reports.
Cyber CrimeGhostCode Phishing Kit Bypasses MFA
A new phishing kit abuses Microsoft's device-code flow to bypass MFA and establish persistent access to Microsoft 365 environments.
Cyber CrimePasskey phishing opens M365 data theft playbook
Microsoft ties passkey-themed social engineering to extortion gangs that blend into Microsoft 365 traffic to steal files and email.
Cyber CrimeKnowBe4 Flags M365 Direct Send Phishing
A KnowBe4 report details a phishing campaign that abused Microsoft 365's Direct Send feature, with volume following US Eastern business hours.
AI & MLAI Rollouts Outpace M365 Permission Checks
A Syskit study finds 76% of UK and US organizations have deployed enterprise AI, but only 43% reviewed permissions first.
SecurityPhaaS Campaign Targets IT Providers via M365 Phishing
CloudSEK reports BigBear 2.0 phishing operation stole over 5,100 Microsoft credentials, hitting IT firms hardest.
Cyber CrimeFake IT help desks push M365 data theft
Executives targeted in vishing attacks that steal tokens and extort victims.
CloudMicrosoft 365 search outage linked to deployment bug
Microsoft is fixing a deployment issue causing search failures in Outlook, SharePoint, and OneDrive.
Cyber CrimeAitM Phishing Targets Financial Data
A sophisticated phishing campaign uses adversary-in-the-middle tactics to compromise Microsoft 365 accounts for financial espionage.
Cyber CrimeRingCentral Spoof Hijacks M365 Accounts
Phishing service Greatness uses spoofed RingCentral emails to bypass MFA and compromise Microsoft 365 accounts.
Cyber CrimeHotel Wi-Fi DNS Hijacks Target M365
Researchers report that compromised hotel network gateways are redirecting business travelers to sophisticated phishing portals.
SecurityMaintenance Bug Triggers Cloud Outage
A routine network update error disrupted Microsoft 365 and Azure services, prompting a full review of automated maintenance systems.
Cyber CrimeHollowGraph Malware Hijacks 365 Calendars
A newly identified malware sample, HollowGraph, is utilizing Microsoft 365 calendar events as a covert command and control channel.
SecurityPhishing Kits Adapt to Bypass MFA Flows
Researchers identify Jalisco and OmegaLord as new threats targeting Microsoft 365 through advanced credential and device exploitation.
Cyber CrimeForg365 and the Industrialization of Account Takeover Tactics
A Telegram-based phishing service is lowering barriers to entry for M365 attacks by automating complex bypass and exfiltration workflows.
Cyber CrimeForg365 PhaaS Escalates Microsoft 365 Account Takeover Risks
A new subscription-based phishing service leverages device code theft and AI to bypass traditional security defenses.
Cyber CrimeA Misconfigured Server Unlocks Three-Actor Phishing Ecosystem
A single exposed directory reveals how multiple threat actors leverage AiTM tools and OAuth abuse to compromise corporate accounts.
SecurityThe MFA Illusion: How One Open Server Exposed Next-Gen Phishing
A simple configuration blunder by an attacker unraveled three sophisticated, bypass-capable phishing campaigns targeting Microsoft 365.
Cyber CrimeAI-Powered Phishing Toolkit Lowers Barrier for Sophisticated Cyberattacks
Forg365, a sophisticated phishing-as-a-service platform, now combines AI-assisted lure generation with advanced AiTM and device code methods to compromise Microsoft 365 accounts and maintain persistent access.