An emerging phishing-as-a-service (PhaaS) platform called Mamba 2FA has been observed targeting Microsoft 365 accounts in ...

Crooks are mostly using it to target people’s Microsoft 365 accounts, both private and corporate, and it costs $250 a month ...

A partner alerted the team that a phishing campaign has been found that’s using HTML attachments to mimic Microsoft 365 login pages. It’s hard to say when the platform was started but there ...

Crooks that purchase the service can create convincing Microsoft 365 login pages, which even allow for the capture of the victim’s authentication tokens, multi-factor authentication (MFA ...

The phishing campaign involves a threat actor claiming via email to be an Office 365 alert from the user ... which somewhat resembles a legitimate Microsoft login page with the company’s ...

Microsoft Outlook users worldwide reported difficulties checking their email from the desktop app. Apparently, a bug lead the ...

Security teams did not receive one log of suspicious activity in Microsoft's platforms in September. A bug caused log data ...

OneDrive, Dropbox, SharePoint, and others, are being abused in phishing attacks that steal passwords and deploy malware.

I showcased how you can use Environment Variables to dynamically retrieve secrets straight from Azure Key Vault, and pass it ...