Threat actors are leveraging Graph API to identify lucrative targets, then passing their access to extortion groups like ...

In an active social engineering campaign, cyber attackers are impersonating IT help desks and using fake passkey setup requests to compromise employee identities and gain access to enterprise cloud ...

Attackers use social engineering, calling personal phones, to steal Microsoft 365 access and pull SharePoint and OneDrive ...

Microsoft says threat actors linked to ShinyHunters, Helix, and other extortion gangs are using passkey and single ...

Microsoft begins a 12-month retirement of Windows PowerShell 5.x support for Graph PowerShell as development shifts to ...

Nation-state espionage operations are increasingly using native Microsoft services to host their command-and-control (C2) needs. A number of unrelated groups in recent years have all come to the same ...