Microsoft's multi-factor authentication (MFA) for Azure and Microsoft 365 (M365) was offline for four hours during Monday's busy start for European subscribers.… "Multi-Factor Authentication ...

The Chinese hackers are able to run a massive but stealthy campaign of password-spraying attacks while evading logs, ...

Device code phishing has emerged as a particularly sophisticated attack vector, with threat actors using tools like TokenTactics to intercept Microsoft 365 tokens and gain unauthorized access to ...

Microsoft's Exchange Administration Center (EAC) has fallen over and appears to be struggling to get up.

Most university applications are protected with MFA including Blackboard, HR Direct, VPN, vLabs, and Microsoft 365. We use Microsoft Authenticator as our Multi-Factor Authentication service provider ...

A new phishing-as-a-service platform has emerged, posing a major threat to Gmail and Microsoft 365 users. Dubbed Tycoon 2FA, ...

A massive Chinese botnet is targeting Microsoft 365 accounts with large-scale password spraying attacks that can bypass multifactor authentication (MFA), according to SecurityScorecard. The botnet, ...

Microsoft says a coding issue is behind a now-resolved Microsoft 365 outage over the weekend that affected Outlook and ...

The Microsoft 365 security baselines are available across ... include premade settings for multifactor authentication (MFA). This can include stricter MFA requirements for administrators than ...

Organizations should disable Basic Auth in Microsoft 365, block the IP addresses listed in the report, enable CAPs to restrict login attempts and use MFA on all accounts. Top 10 MITRE ATT&CK ...