Microsoft Entra retires SMS and voice MFA by February 2027, making passkeys default. Here's the full timeline and what IT ...

Hotel Wi-Fi hack targeting Microsoft 365 accounts has turned captive portal gateways at hotels and conference centers in the ...

Two new phishing kits, Jalisco and OmegaLord, have been discovered in attacks targeting Microsoft 365 accounts, using techniques that defeat multi-factor authentication (MFA). While Jalisco uses the ...

Hackers are changing the DNS settings on Wi-Fi devices at hotels and conference centers to redirect users to fake Microsoft ...

AI is accelerating attackers' ability to change infrastructure, tools and techniques, making durable behavior-based detection and broader visibility increasingly important to cybersecurity defense.

By compromising captive Wi-Fi gateways instead of user devices, attackers can silently redirect authentication traffic and ...

The Telegram-distributed service combines AI-assisted lures with device-code phishing and attacker-side session refresh, complicating containment after an account is breached.

Researchers at ReliaQuest warned of widespread DNS poisoning attacks targeting the hospitality sector as part of a cyber ...

The Telegram-distributed service combines AI-assisted lures with device-code phishing and attacker-side session refresh, complicating containment after an account is breached. A newly documented ...

A Microsoft 365 device code phishing campaign has been observed leveraging collaboration-themed lures to take control of victim accounts between the last week of June 2026 and into early July, per ...

At least two distinct threat actors are weaponizing a novel evasion technique called OAuth client ID spoofing in cloud campaigns, while slipping past telemetry. The activity allows users to enumerate ...