Home Search
Microsoft - search results
If you're not happy with the results, please do another search
Hackers Exploiting Microsoft 365 OAuth Workflows to Target Organizations
A new campaign by Russian threat actors. These actors are exploiting legitimate Microsoft OAuth 2.0 authentication workflows to compromise targeted organizations.
Since early March 2025,...
Microsoft Boosts MSA Signing Service Security on Azure Following Storm-0558 Breach
In a significant security enhancement following last year's high-profile Storm-0558 breach, Microsoft has completed the migration of its Microsoft Account (MSA) signing service to...
“Microsoft’s Secure Future Initiative” Biggest Cybersecurity Project in Its History
Microsoft has released its second progress report on the Secure Future Initiative (SFI), described as the largest cybersecurity engineering project in the company’s history....
Microsoft Addresses Entra ID Token Logging Issue, Alerts to Protect Users
Microsoft has acknowledged a recent issue that triggered widespread alerts in its Entra ID Protection system, flagging user accounts as high risk due to...
Windows Defender Policies Bypassed Using WinDbg Preview via Microsoft Store
A significant vulnerability in Windows Defender Application Control (WDAC) implementations, demonstrating how attackers can circumvent strict security policies through Microsoft's own debugging tool.
The exploit...
Microsoft Warns of Ransomware Exploiting Cloud Environments with New Techniques
Microsoft has issued an alert regarding sophisticated ransomware attacks targeting hybrid cloud environments in Q1 2025.
These attacks exploit vulnerabilities at the intersection of on-premises...
Microsoft Vulnerabilities Hit Record High With 1,300+ Reported in 2024
Microsoft's security landscape faced unprecedented challenges in 2024, with vulnerability reports soaring to an all-time high of 1,360 identified security flaws across the company's...
Beware of Weaponized Amazon Gift Cards That Steals Microsoft Credentials
Cybercriminals have launched a sophisticated phishing campaign exploiting the popularity of digital gift cards to steal Microsoft credentials from unsuspecting users.
This new attack vector...
Hackers Weaponize Gamma Tool Via Cloudflare Turnstile to Steal Microsoft Credentials
Cybersecurity experts have uncovered a sophisticated multi-stage phishing campaign that exploits Gamma, an AI-powered presentation tool, to deliver credential-harvesting attacks targeting Microsoft account users.
This...
Hackers Abuse Node.js to Deliver Malware – Microsoft Warns
Attackers are increasingly exploiting Node.js, a widely trusted, open-source JavaScript runtime, to deliver sophisticated malware, steal sensitive data, and compromise entire systems.
Recent campaigns observed since late...