Criminals are using stolen email addresses to distribute malicious OAuth Apps These apps steal sensitive data and redirect people to phishing pages The pages steal login credentials and deliver ...

You no longer need a Microsoft account to open shared Office files on iPhone or iPad. A new update makes accessing Word, ...

Threat actors are abusing Microsoft 365 infrastructure in a BEC campaign, and target its users in two brand impersonation campaigns.

A massive botnet of over 130,000 compromised devices is conducting password-spray attacks against Microsoft 365 (M365) accounts worldwide, targeting basic authentication to evade multi-factor ...