Researchers have uncovered a sustained and ongoing campaign by Russian spies that uses a clever phishing technique to hijack ...

Volexity highlighted how Russian nation-state actors are stealing Microsoft device authentication codes to compromise ...

The tech giant said the attack involves sending phishing emails that masquerade as Microsoft Teams meeting invitations that, ...

Microsoft Threat Intelligence Center discovered an active and successful device code phishing campaign by a threat actor we ...

Digital thieves – quite possibly Kremlin-linked baddies – have been emailing out bogus Microsoft Teams meeting invites to ...

Today is Microsoft' 2025 Patch Tuesday, which includes security updates for 55 flaws, including four zero-day vulnerabilities ...

A new report from cybersecurity researchers Abnormal Security noted how the attack starts with a phishing email, impersonating the target company’s IT team, and claiming that the system has been ...

This page asks for login credentials and MFA codes. “The phishing templates ... multiple commonly used MFA mechanisms, including Microsoft Authenticator, Duo Security, and SMS verification.” ...

A help desk phishing campaign targets an organization's Microsoft Active Directory Federation Services (ADFS) using spoofed ...

Setting up a secondary form of ID is one of the best ways to keep your online accounts safe amid endless data breaches.

Patch Tuesday Microsoft’s February patch collection is mercifully smaller than January’s mega-dump. But don't get too relaxed ...

Microsoft fixes CVE-2025-21415 (CVSS 9.9) and CVE-2025-21396 flaws, addressing privilege escalation risks in Azure AI Face ...