Microsoft 365

Microsoft is expanding the sharing capabilities of its AI-powered features within Microsoft 365 subscriptions, allowing Family and Premium subscribers to share Copilot and other AI usage benefits. This change, announced this week, rectifies a previous limitation where only the primary…

Microsoft CEO Satya Nadella recently hosted an exclusive, invite-only event for key enterprise customers to unveil a significant strategic pivot for its AI assistant, Copilot. Instead of a public announcement, Nadella directly communicated to a select group of clients…

ANY.RUN researchers have detailed a sophisticated CSuite phishing campaign specifically targeting United States-based executives, as revealed through an analysis of 351 sandbox submissions. This campaign demonstrates a dual-pronged attack strategy that combines the theft of Microsoft 365 session cookies…

OpenAI has launched a suite of office features, positioning itself as a direct competitor to established software giants like Microsoft. This strategic move signals OpenAI's ambition to expand beyond its core AI model development into the productivity software market…

Cybersecurity researchers have detailed an ongoing TeamFiltration campaign, identified by the codename UNK_CondorFiltration, which has successfully compromised more than 5,700 accounts across 28 distinct Microsoft 365 tenants. Proofpoint, a cybersecurity firm, reported that this campaign has predominantly targeted retail…

Microsoft's Digital Crimes Unit (DCU) has successfully disrupted the EvilTokens platform, a phishing-as-a-service (PhaaS) operation that compromised more than 12,000 Microsoft accounts across over 10,000 organizations. The operation, detailed in a Microsoft Security Blog post on May 23, 2024, involved…

Microsoft 365 facilitates straightforward file sharing, but this ease of use can lead to lingering access permissions long after a file's initial sharing purpose has concluded. This situation often results in organizations possessing limited visibility into which individuals retain access…

Microsoft has officially acknowledged and is actively investigating a persistent technical issue that results in the Copilot and Copilot Chat buttons becoming unavailable within the Classic Outlook interface for a subset of Windows users.

Microsoft has reported that threat actors are employing social engineering tactics centered around passkey and single sign-on (SSO) themes to compromise corporate Microsoft accounts and exfiltrate data from Microsoft 365 services.

A sophisticated phishing-as-a-service (PhaaS) framework, identified as BigBear 2.0, has been actively exploited to circumvent multi-factor authentication (MFA) protections, resulting in the compromise of at least 258 organizations and the exfiltration of over 5,000 Microsoft 365 credentials.

Microsoft is implementing a significant overhaul of its financial reporting structure, set to take effect at the beginning of the next fiscal quarter. The company will transition from its current three reporting segments—Productivity and Business Processes, Intelligent Cloud, and More…

Cybersecurity researchers have detailed a new adversary-in-the-middle (AitM) phishing toolkit named NovaCookies, which is being used to intercept and capture authenticated Microsoft 365 sessions. The toolkit operates as a proxy, redirecting users' sign-in attempts to malicious servers while harvesting…

The Mirage2FA campaign, a sophisticated phishing-as-a-service toolkit, has impacted an estimated 4,500 companies across the United States and European Union between 2024 and 2026. This campaign specifically targets Microsoft 365 accounts by leveraging legitimate login flows to circumvent two-factor authentication…

Cybersecurity researchers have identified an active and widespread phishing campaign that leverages adversary-in-the-middle (AitM) techniques to compromise Microsoft 365 accounts. The primary objective of this campaign is to gain access to sensitive information, specifically targeting key personnel involved in financial…

The Kali365 phishing kit is actively exploiting Microsoft's legitimate authentication mechanisms to gain unauthorized access to sensitive corporate data within US organizations. This sophisticated attack vector targets companies by tricking employees into approving attacker-controlled device codes directly on Microsoft's official…

The Greatness phishing-as-a-service (PhaaS) platform has evolved its attack vectors to include sophisticated methods targeting Microsoft 365 accounts, moving beyond basic credential harvesting. This platform, identified by security researchers, now employs adversary-in-the-middle (AiTM) techniques and device-code phishing.

Security researchers at Group-IB have identified a novel Windows malware strain that weaponizes Microsoft 365 calendars, transforming them into covert command-and-control channels and data exfiltration tools. This sophisticated attack vector allows threat actors to remotely manage infected systems and steal…

Microsoft has identified a global cyberattack campaign that leverages compromised hotel Wi-Fi networks to steal credentials for Microsoft 365 accounts. The threat actor behind this operation has been identified as Midnight Blizzard, also known by the designation APT29.

Cybercriminals are actively exploiting vulnerabilities in hotel Wi-Fi networks by manipulating Domain Name System (DNS) settings to redirect users to fraudulent Microsoft 365 login pages. This sophisticated phishing tactic aims to harvest sensitive user credentials, including usernames and passwords…

Microsoft announced this week that it will discontinue security updates for Exchange Server 2016 and Exchange Server 2019 in October. This cessation of support applies even to customers utilizing the Extended Security Update (ESU) program.