Multiple threat actors are compromising Microsoft 365 accounts in phishing attacks that leverage the OAuth device code ...

A 39-year-old U.K. resident has been arrested and charged with operating a hack-to-trade fraud, which generated millions of dollars by hacking Microsoft Office 365 email accounts. The alleged hacker, ...

A Russia-aligned threat group uses Microsoft 365 device code phishing to steal credentials and take over accounts, tracked ...

Beware this highly sophisticated Microsoft 365 attack. Update, March 15, 2025: This story, originally published March 13, has been updated with further technical detail regarding the Microsoft 365 ...

Crooks are using link wrapping services to entice victims into clicking The links redirect the victims to a fake Microsoft 365 landing page The campaign has been going on for at least two months ...

A surge in phishing campaigns abusing Microsoft’s OAuth device code authorization flow has been observed with multiple threat ...

A new phishing-as-a-service (PhaaS) platform called ONNX Store is targeting Microsoft 365 accounts for employees at financial firms using QR codes in PDF attachments. The platform can target both ...

A sprawling phishing empire from a threat actor known as W3LL is spreading globally, successfully compromising more than 8,000 corporate Microsoft 365 business accounts in the last 10 months in ...

Being locked out of your Microsoft 365 administrator account can be a stressful experience, as it prevents you from managing users and services. This typically occurs due to security features, such as ...

The Nigeria Police Force National Cybercrime Centre (NPF–NCCC) has uncovered an international cybercrime operation involving ...