From late April 2026 to mid-June 2026, Microsoft Defender Experts observed increased ACR Stealer activity across customer ...

New Jalisco and OmegaLord phishing kits target Microsoft 365 accounts by abusing device code flows, OAuth tokens, and MFA ...

New Microsoft 365 phishing kits Jalisco and OmegaLord abuse OAuth codes and fake login pages to bypass MFA and steal cloud ...

Two-factor authentication adds an extra layer of security to crypto accounts. Learn why hardware security keys, passkeys, and authenticator apps offer better protection than SMS or email verification.

Beginning in September, Microsoft Entra ID will replace SMS and voice authentication with passkeys, signaling that ...

Two new phishing kits, Jalisco and OmegaLord, have been discovered in attacks targeting Microsoft 365 accounts, using ...

Passkeys become the default Microsoft Entra ID authentication method on September 1st, 2026. Native SMS and voice authentication will be fully retired on February 1st, 2027, and companies that require ...

Microsoft will make passkeys the default authentication method in Entra ID and phase out its native delivery of SMS and voice authentication, a major shift aimed at reducing organizations' dependence ...

An exposed attack server led Lexfo to three Microsoft 365 phishing operations using Evilginx and device code abuse to capture ...

Microsoft 365 passkey phishing is now targeting enterprise employees mid-rollout: criminal group Pink cold-calls workers ...

O-UNC-066 uses vishing and a live phishing kit to trick Microsoft 365 users into enrolling attacker-controlled Entra passkeys ...

New Helix extortion group steals SharePoint data after compromising Microsoft 365 accounts through voice phishing and MFA ...