Microsoft warns attackers are using passkey and MFA update requests to phish employees, hijack sessions, and access Microsoft 365 data.

ChatGPT subscription notices have become the latest cover for credential-stealing emails. The campaign uses a familiar billing problem to push recipients toward a fake sign-in page, where attackers ...

Sentire uncovers the GhostCode phishing kit abusing Microsoft OAuth to steal tokens, register attacker devices and access ...

Sentire's Threat Response Unit (TRU) has uncovered a previously undocumented device-code phishing kit, dubbed "GhostCode," that abuses Microsoft's OAuth 2.0 device authorization grant flow to hijack ...

GhostCode phishing kit hijacks Microsoft 365 accounts by tricking users into approving malicious device-code logins.

Microsoft says threat actors posing as IT helpdesk staff are tricking employees into phishing and device-code attacks that ...

The activity, observed since May 2026, relies heavily on social engineering. Victims may receive a phone call, SMS message, or Microsoft ...

Passkey-themed social engineering is being used to compromise identities and enable broader cloud attacks. Learn how threat actors establish MFA persistence, abuse Microsoft Graph for reconnaissance, ...

HMAC is a fast and lightweight way to ensure the authenticity and data integrity of messages exchanged between web servers and clients. Learn how to use it in ASP.NET Core minimal API applications.

One afternoon earlier this month, I pulled up to the rec center and realized that I had a problem. It was not the three boisterous tweens in the back seat who were clamoring to be set loose in the ...

This is the second in a series delving into specific proposals in the Federal Communications Commission further notice of proposed rulemaking (FNPRM), intended to improve the Emergency Alert System ...