ConsentFix and ClickFix: How Microsoft 365 Accounts are Hijacked in 3 Seconds

ConsentFix and ClickFix attacks steal Microsoft 365 tokens in seconds using fake prompts and OAuth flows. Learn how these MFA ...
Forbes

2FA Code Attacks Surge As Russian Hackers Target Microsoft Users

Microsoft 365 is under attack, China and Russia afflited hackers suspected. Updated December 23 with advice from a mobile security solutions expert regarding the Russian device code attacks targeting ...
Dark Reading

'ONNX' MFA Bypass Targets Microsoft 365 Accounts

A highly organized phishing-as-a-service operation (PhaaS) is targeting Microsoft 365 accounts across financial firms with business email compromise (BEC) attacks that leverage a two-factor ...
Seattle Times

Microsoft outage hits email, Teams accounts; restoration ongoing

Email accounts went down for thousands of Microsoft users on Thursday after an outage knocked out multiple services, including Outlook and Teams. Reports of Microsoft 365-related outages spiked ...
Forbes

New Warning As Microsoft 365 Attack Can Bypass Email Security

Beware this highly sophisticated Microsoft 365 attack. Update, March 15, 2025: This story, originally published March 13, has been updated with further technical detail regarding the Microsoft 365 ...