Microsoft has reminded admins to migrate Entra ID users to phishing-resistant authentication methods to avoid sign-in ...

The EvilTokens platform that compromised more than 12,000 Microsoft accounts at over 10,000 organizations has been disrupted in an effort led by Microsoft's Digital Crimes Unit (DCU).

EvilTokens has quickly become one of the top PhaaS platforms, enabling device code phishing attacks through AI-assisted lures, automated infrastructure, and token theft. In collaboration with partners ...

Storm-2570 is a ransomware affiliate that uses consistent post-compromise tools and techniques across deployments involving Qilin, DragonForce, Anubis, and BERT ransomware, and provides guidance to ...

Microsoft is retiring SMS first-factor sign-in for Microsoft Entra ID workforce tenants worldwide, requiring organizations to migrate affected users before February 1, 2027.

Which MFA fits your organization? Our use-case guide maps 8 multi-factor authentication picks to SMBs, M365 shops, legacy ...