Microsoft Entra retires SMS and voice MFA by February 2027, making passkeys default. Here's the full timeline and what IT ...

Two new phishing kits, Jalisco and OmegaLord, have been discovered in attacks targeting Microsoft 365 accounts, using ...

Forg365 is a new phishing platform targeting Microsoft 365 accounts with AI emails, AiTM attacks, and device-code abuse.

Microsoft 365 passkey phishing is now targeting enterprise employees mid-rollout: criminal group Pink cold-calls workers ...

QR code phishing bypasses MFA, leading to data theft. How quishing attacks work, and what you can do to stay safe.  Ever had ...

Free unofficial patches are available for a recently disclosed Windows zero-day flaw that allows attackers to escalate privileges on up-to-date Windows systems.

Microsoft Entra will retire its SMS and voice MFA services on February 1, 2027, as it moves public cloud customers toward ...

New Jalisco and OmegaLord phishing kits target Microsoft 365 accounts by abusing device code flows, OAuth tokens, and MFA ...

The FBI warns about Kali365, a phishing scam targeting Microsoft 365 accounts that can bypass multifactor authentication using device code tricks.

Microsoft Patch Tuesday July 2026 delivers 622 CVEs, the largest release in company history, with two exploited zero-days in ...

China warns of a suspected security backdoor in Anthropic’s Claude Code, prompting Alibaba to ban the AI coding tool for workplace use.

PCWorld reveals essential Microsoft account settings that users often overlook, including privacy controls, subscription management, and security features that significantly impact data protection.