Microsoft is retiring SMS first-factor sign-in for Microsoft Entra ID workforce tenants worldwide, requiring organizations to migrate affected users before February 1, 2027.

Microsoft has reminded admins to migrate Entra ID users to phishing-resistant authentication methods to avoid sign-in ...

Which MFA fits your organization? Our use-case guide maps 8 multi-factor authentication picks to SMBs, M365 shops, legacy ...

A new phishing kit abuses a legitimate Microsoft device authorization flow intended for use with printers or smart TVs to steal authentication tokens, register attacker-controlled devices and gain ...

Attackers can exploit CVE-2026-69843, a critical authentication bypass in Microsoft Fabric, without credentials or user interaction. This CVSS 10.0 vulnerability uses a network attack vector and ...

Microsoft gibt .NET 11.0 RC 1 für produktive Tests frei. Windows Forms und SignalR erhalten neue Funktionen, die Installation bleibt manuell.

The CVSS 10.0 Baseline On September 3, 2026, Microsoft disclosed nine vulnerabilities outside the standard Patch Tuesday cycle. Two of these carry a CVSS 10.0 rating: CVE-2026-83711, an authorization ...

Microsoft is currently looking into a significant service disruption that is leading to authentication problems and delays or failures in email delivery for Exchange Online users. Microsoft is ...

Microsoft is reportedly phasing out SMS and voice authentication in Entra ID. See the claimed deadlines and what IT administrators should do next. Microsoft reportedly plans to phase out SMS and voice ...

Microsoft has announced that passkeys will become the default authentication method for the Entra ID enterprise identity service starting September 2026. Passkeys will be enabled automatically for ...

Microsoft will begin rolling out passkeys as the default authentication experience for Microsoft Entra ID in the public cloud on September 1, 2026. Organizations with SMS or voice authentication ...