A fast-spreading cyberattack kit called ‘Kali365’ allows low-skill scammers to hijack a user’s account without ever stealing ...

Microsoft ended support for password master in Edge on June 4, 2026, in favour of Windows Hello.

The FBI has warned about a phishing tool called Kali365 that can bypass two-factor authentication on Microsoft 365 accounts.

Microsoft is phasing out SMS 2FA for personal accounts as it pushes users toward passkeys and other passwordless sign-in methods. Here’s what users should know.

The FBI warns that Kali365 phishing attacks can bypass Microsoft 365 MFA by stealing OAuth session tokens through device code phishing.

The FBI issued a warning on May 21, as a new AI-powered attack enables "threat actors to obtain Microsoft 365 access tokens and bypass multi-factor authentication ( MFA) protocols without intercepting ...

A phishing kit subverting Microsoft’s legitimate authentication flow lets attackers break into accounts without stealing ...

Microsoft has made an important change in recent Windows 11 Pro Insider Preview builds by disabling SMB guest authentication fallbacks by default. This has been done to improve the security of the OS.

Microsoft is investigating an ongoing incident that is causing users to experience errors with some Microsoft 365 authentication features. As the company revealed earlier today in an incident alert ...

Update 5/20: Microsoft now considers these authentication problems to be resolved, having released “out-of-band” updates on May 19, as described here. Microsoft this week acknowledged possible ...

Microsoft is investigating a known issue causing authentication failures for some Windows services after installing updates released during the May 2022 Patch Tuesday. This comes after Windows admins ...

Microsoft this week announced a preview of "Authentication Strength," a new control for organizations using the Azure Active Directory Conditional Access service. Authentication Strength lets IT pros ...