cloud security

A rapidly escalating security threat has emerged for organizations relying on Microsoft 365, as hackers have devised sophisticated phishing campaigns that can bypass even two-factor authentication (2FA) protections. Since the beginning of 2025, attackers have compromised nearly 3,000 accounts...

Microsoft’s latest regulatory saga in the European Union has unfolded with all the drama of a high-stakes legal thriller—except the suspense ended not with resolution but with regulatory theater. On July 28, 2025, the European Data Protection Supervisor (EDPS) closed a four-year investigation...

Cybercriminals have ramped up efforts to exploit Microsoft 365’s Direct Send feature and unsecured SMTP relays, launching sophisticated phishing campaigns that masquerade as internal company emails—placing even vigilant organizations at substantial risk. According to recent research by...

A new wave of cyberattacks has exposed a dangerous flaw in trusted email security services, as hackers have successfully exploited protective link-wrapping features to orchestrate large-scale phishing campaigns targeting Microsoft 365 logins. By hijacking the mechanisms designed to keep users...

A wave of highly sophisticated phishing attacks has put Microsoft 365 users—and the very foundations of modern email security—at risk, exposing a perilous paradox: the same technologies designed to protect cloud productivity platforms are now being systematically exploited to facilitate...

MTN Group has emerged as a trailblazer in Africa's digital transformation narrative, making headlines for certifying over 1,250 employees through the Microsoft Enterprise Skills Initiative (ESI) in a single year—more than any other Microsoft customer on the continent. This unprecedented internal...

A digital storm rumbled through India’s energy and technology sectors when Microsoft temporarily cut off cloud access to Nayara Energy, the country’s second-largest oil refiner, triggering an international debate on sanctions compliance and digital sovereignty. This episode, rooted in Nayara’s...

A surge of concern ricocheted across the open-source software community last week when Mike Kaganski, a prominent LibreOffice developer, found himself locked out of his Microsoft account for seven frustrating days. This event, echoing recent reports of arbitrary account lockouts affecting...

Microsoft’s abrupt suspension of cloud service access to Nayara Energy, a leading Indian oil refiner, has sent shockwaves through the global technology and energy sectors, shining a spotlight on the increasingly complex interplay between geopolitics, corporate structure, and digital sovereignty...

Attackers have found a chillingly effective way to subvert defenses integrated into the heart of enterprise email security. According to new research from Cloudflare, threat actors are actively exploiting “link wrapping” services—offered by reputable vendors like Proofpoint and Intermedia—to...

Cybercriminals are once again redefining the threat landscape, this time by exploiting trusted email security mechanisms to compromise Microsoft 365 accounts. In a sophisticated new campaign, threat actors have weaponized link-wrapping services—previously considered pillars of safe email...

Microsoft’s abrupt disconnection of Nayara Energy, a major Indian oil refinery operator, from its cloud services sent ripples throughout the global tech and energy sectors—a move spurred not by technical woes, but by geopolitical sanctions issued by the European Union. The incident, emblematic...

As emergency services across the globe face a surge in operational demands and heightened expectations for rapid, reliable response, the race to modernize IT service management (ITSM) infrastructure is on. Against the backdrop of relentless workload fluctuations, budgetary constraints, and...

Cybercriminals have once again proven their adaptability by leveraging trusted technology—from cybersecurity companies themselves—to bypass email defenses and target Microsoft 365 users. In a revealing discovery, threat actors have been exploiting link-wrapping services from well-known vendors...

Leveraging trusted internal channels has long been a gold standard for cybercriminals seeking to evade organizational defenses, but a recent campaign uncovered by Proofpoint signals a new level of ingenuity in exploiting a familiar Microsoft 365 feature: Direct Send. This functionality, designed...

As cyber threats continue to evolve, organizations leveraging cloud-based productivity suites like Microsoft 365 face novel forms of attack that exploit the platform’s very architecture. Recently, security researchers unveiled a troubling trend: hackers are weaponizing Microsoft 365’s Direct...

The evolution of phishing campaigns in the cloud era has introduced a new breed of attacks that are increasingly hard to spot, even for seasoned security professionals. Among these, a recent campaign targeting Microsoft 365 logins stands out for its cunning use of Microsoft OAuth applications...

Phishing campaigns continue to evolve, adapting to security systems and adopting new tactics to dupe even vigilant users. Recent findings have uncovered a sophisticated Microsoft MFA phishing scheme that leverages the OAuth authorization framework—specifically, Microsoft OAuth applications—to...

From a single spark at a Microsoft conference to the glow of a billion-dollar unicorn, Nerdio’s journey is a powerful illustration of how expertise, risk-taking, and an unwavering commitment to customer centricity can disrupt even the most complex corners of enterprise IT. Nerdio, co-founded in...

Threat actors in 2025 have harnessed a new caliber of cyberattack, subverting enterprise identity and trust by weaponizing Microsoft OAuth applications to bypass even the most robust multi-factor authentication (MFA) defenses. This emerging campaign, tracked by Proofpoint and other leading...