When Microsoft acquired PhoneFactor last fall, the handwriting was on the wall for the future of two-factor authentication for the company’s consumer cloud offerings. Now it appears that handwriting ...

Microsoft warned Entra global admins on Thursday to enable multi-factor authentication (MFA) for their tenants until October 15 to ensure users don't lose access to admin portals. This is part of ...

Two new phishing kits, Jalisco and OmegaLord, have been discovered in attacks targeting Microsoft 365 accounts, using ...

Microsoft's public cloud computing platform, Azure, was recently targeted by a cyberattack that led to a multi-hour outage. While a newly announced mandatory two-factor authentication login ...

Forbes contributors publish independent expert analyses and insights. Zak Doffman writes about cybersecurity, surveillance and privacy. This voice experience is generated by AI. Learn more. This voice ...

The attack abused misconfigured conditional access policies to bypass multi-factor authentication protections.

The attack exploited previously exposed credentials and flaws in enterprises’ multi-factor authentication configurations.

The US Federal Bureau of Investigation (FBI) has issued an alert warning Microsoft 365 users about a rapidly emerging phishing campaign known as "Kali365", a malicious platform that allows ...

Microsoft postponed a major Exchange Online PowerShell authentication change until December 2026 following concerns from ...