credential stuffing

Security researchers have observed a coordinated, large‑scale reconnaissance campaign probing Microsoft Remote Desktop services that began as a sudden one‑day spike and escalated into a torrent of scans — a pattern that looks less like opportunistic background noise and more like deliberate...

In a rapidly evolving cybersecurity landscape, a newly discovered botnet comprising over 130,000 compromised devices has set its sights on Microsoft 365 accounts. This stealthy campaign, uncovered by SecurityScorecard’s STRIKE Threat Intelligence team, leverages sophisticated password spraying...

Imagine you’re strolling through a digital fortress, where Microsoft 365 (M365) reigns supreme as the beating heart of corporate communications, data, and collaboration. But then, like a lightning strike on a castle tower, a new wave of malicious attacks suddenly pierces the defenses. This could...

Brace yourselves, Windows enthusiasts—hackers are at it again! This time, the culprit is a high-performance Go library called FastHTTP, which is being used by threat actors to launch high-speed brute-force password attacks on Microsoft 365 accounts. This troubling development exposes how...