A new wave of device code phishing shows how threat actors are scaling account compromise using AI and end‑to‑end automation.

Hackers linked to Russia’s military intelligence units are using known flaws in older Internet routers to mass harvest ...

Microsoft just made external MFA generally available in Entra ID. This update lets businesses easily use third-party security tools for user logins.

Passwords are responsible for 80% of data breaches. Passwordless authentication eliminates the attack surface entirely. Here ...

Two of the bigger authentication announcements to come out of the RSA Conference this week both point in the same direction: organizations need a more flexible, unified approach to identity security, ...

High-value assets including domain controllers, web servers, and identity infrastructure are frequent targets in ...

The phishing-as-a-service toolkit leverages legitimate authentication to capture tokens and access Microsoft 365 services.

One of Defender’s bigger advantages is that it’s built directly into Windows. There’s nothing to install and nothing extra to ...

Device code phishing targets 340+ Microsoft 365 orgs since Feb 2026 via OAuth abuse, enabling persistent token hijacking and ...

BYOD policies just got more secure with Entra passkeys for Windows Hello Windows devices will more resistant to phishing and credential stuffing Microsoft Authenticator is scanning for rooted and ...

Passwords are a necessary evil when it comes to protecting your accounts and data, but their days may be numbered. Now, there ...