With growing security concerns about the account authentication system, Microsoft is ushering in a much-needed but ...

Microsoft is phasing out SMS 2FA for personal accounts as it pushes users toward passkeys and other passwordless sign-in ...

New FBI warning for Microsoft users. The FBI issued a warning on May 21, as a new AI-powered attack enables "threat actors to ...

Microsoft is officially in the process of removing SMS authentication and account recovery as an option from everyone's ...

Microsoft has confirmed that SMS-based authentication and account recovery for personal accounts is on its way out. The company argues that plaintext SMS codes are no ...

Microsoft is ending SMS login codes for personal accounts and replacing them with passkeys, authenticator apps, and backup ...

A new phishing kit is being offered on Telegram allowing even newbie hackers an easy way to grab OAuth tokens.

The FBI warns that Kali365 phishing attacks can bypass Microsoft 365 MFA by stealing OAuth session tokens through device code phishing.

Microsoft Azure will make multi-factor authentication mandatory across services. It will affect various services in two phases, the first in October and the second phase in early 2025. Microsoft has ...

The FBI is warning about the Kali365 phishing-as-a-service platform (PhaaS) that is used to hijack Microsoft 365 accounts by abusing OAuth device code authentication to steal session tokens and bypass ...

Update 5/20: Microsoft now considers these authentication problems to be resolved, having released “out-of-band” updates on May 19, as described here. Microsoft this week acknowledged possible ...