New Microsoft 365 phishing kits Jalisco and OmegaLord abuse OAuth codes and fake login pages to bypass MFA and steal cloud ...

Beginning in September, Microsoft Entra ID will replace SMS and voice authentication with passkeys, signaling that ...

Microsoft will make passkeys the default in Entra ID from September 1, 2026, before retiring SMS and voice authentication in 2027.

The Telegram-distributed service combines AI-assisted lures with device-code phishing and attacker-side session refresh, ...

Starting September 1, 2026, passkeys will become the default authentication experience in Microsoft Entra. Read more about ...

An exposed attack server led Lexfo to three Microsoft 365 phishing operations using Evilginx and device code abuse to capture ...

Microsoft 365 passkey phishing is now targeting enterprise employees mid-rollout: criminal group Pink cold-calls workers ...

Digital security is crucial for journalists in Bangladesh ahead of the 2026 elections. Learn about risks and protective ...

I review privacy tools like hardware security keys, password managers, private messaging apps, and ad-blocking software. I also report on online scams and offer advice to families and individuals ...

A vulnerability in Microsoft Authenticator for Android and iOS could expose login codes to malicious apps on the same device. Microsoft has released a patch. A newly discovered vulnerability in ...

The Microsoft Authenticator app is a vital tool for securing your accounts with two-factor authentication (2FA). When it stops delivering approval notifications or one-time codes, it can lock you out ...