Wiz researchers found a single credential that could unlock every database running on Microsoft’s Azure Cosmos DB. They named it the Cosmos Master Key. And the vulnerability hunter that helped find it ...

Every organization requires a different approach to Multi-Factor Authentication (MFA). Depending on the size, complexity, and sensitivity of an organization’s data, the requirements of an MFA solution ...

Microsoft Entra retires SMS and voice MFA by February 2027, making passkeys default. Here's the full timeline and what IT ...

Check out what's included in the new build 28120.2546 for the Experimental channel of the Windows 11 (26H1) Insider program.

The HollowGraph malware abuses Microsoft Graph API and a compromised 365 account’s calendar for C&C communication.

A password spray campaign targeting Azure CLI sign-ins exposed how narrow Conditional Access policies can leave Microsoft 365 accounts vulnerable even when MFA is enabled. Attackers found a Microsoft ...

Microsoft's AI assistant Copilot went down Thursday afternoon for the second significant time this month, disrupting enterprise workflows across North America and Europe — and landing the company in ...

A criminal subscription service called Kali365 is hijacking Microsoft 365 accounts at organizations across multiple sectors without ever touching a user's password — and it defeats multi-factor ...

Microsoft Threat Intelligence has disclosed details of a cyberattack carried out by a threat actor tracked as Storm-2949, which escalated from a targeted identity compromise into a large-scale breach ...

And here we go again. The software giant has confirmed a new issue affecting Microsoft account sign-ins on Windows 11 after installing the March 2026 update. According to the company, devices running ...