The attack abused misconfigured conditional access policies to bypass multi-factor authentication protections.

Hackers launched 81 million login attempts against Microsoft 365, exploiting Azure CLI and MFA configuration gaps to ...

The FBI has alerted the public about Kali365, a Telegram-based Phishing-as-a-Service platform designed to bypass multi-factor authentication and target Microsoft 365 users.

The attack exploited previously exposed credentials and flaws in enterprises’ multi-factor authentication configurations.

The US Federal Bureau of Investigation (FBI) has issued an alert warning Microsoft 365 users about a rapidly emerging phishing campaign known as "Kali365", a malicious platform that allows ...

Microsoft has outlined several mitigations to protect against attacks on multi-factor authentication that will unfortunately make life more difficult for your remote workers. Three years ago, attacks ...

(NEXSTAR) – A new phishing tool is allowing cyber attackers to get access to Microsoft 365 users’ accounts without even needing to know your password, the FBI said in a warning issued to the public on ...

Talos details ARToken, a PhaaS panel tied to EvilTokens that supports device code phishing, BEC workflows, SharePoint theft, ...

The Federal Bureau of Investigations issued a public service announcement Monday to warn of a phishing scam that targets ...