identity security

Well, lock up the cookies and hide your milk, because there’s a new heist in town—and it’s got a taste for your MFA-protected Microsoft sessions. Security researchers from Varonis have just dropped a proof-of-concept that makes today’s browser extension landscape about as trustworthy as a used...

If you’re still shuffling VPN connection profiles like a deck of cards every Monday morning, you might want to sit down—because everything you thought you knew about “secure remote access” is in for a major rethink. VPNs: The Ancient Relic That Won’t Retire Let’s face it: the humble VPN has been...

If you run a major chunk of your business on Microsoft 365, you might want to put that celebratory “we passed another compliance audit” cake back in the fridge, at least until you hear about the latest episode of Authentication Drama Theatre: the “Cookie Bite” attack. This newly publicized trick...

Arkose Labs, a leader in fraud prevention, has recently deepened its collaboration with Microsoft by participating in the Microsoft Security Copilot Partner Private Preview. This initiative aims to integrate Arkose Labs' advanced bot management solutions with Microsoft's AI-driven security...

Feeling nostalgic for those halcyon days when logging into your enterprise apps felt optional? Well, savor the memory—Microsoft just flipped the script. In its ongoing tug-of-war with shadowy cyber villains, the tech giant has unleashed the “Reauthentication Every Time Policy” for Entra ID, an...

When Microsoft, a perennial leviathan in enterprise software, decides to extend its embrace to a cybersecurity company, IT veterans perk up faster than a server room in a heatwave. Microsoft’s deepened relationship with Arkose Labs—provider of cross-industry account security, bot mitigation, and...

In a world where cybersecurity threats loom like dark clouds on the horizon, Microsoft is making strides with its Secure Future Initiative. Launched to tackle critical security challenges that have put both businesses and government data at risk, this initiative aims to create a robust defensive...

If you’re a Microsoft user who already winces at the monthly rhythm of Patch Tuesday, brace yourself for a whiplash: 2024 has battered records, as the twelfth edition of the Microsoft Vulnerabilities Report delivers a not-so-sweet symphony—you guessed it—of 1,360 reported vulnerabilities. That’s...

North winds carry more than just Poland’s infamous cold: as March 2025 would have it, they swept in a fresh surge of NTLM hash theft, thrusting CVE-2025-24054 into the glaring spotlight of cybersecurity’s main stage. Weeks before most CIOs had even had their coffee, threat actors were already...

Record-Breaking Microsoft Vulnerabilities: The State of Digital Risk in 2024 The Microsoft Security Paradox: More Defenses, More Vulnerabilities In a world where our digital existence is increasingly entangled with complex software, even technology giants like Microsoft are not immune to a...

Microsoft’s Soaring Vulnerability Count in 2024: A Worrying Security Milestone For an entire generation, Microsoft’s monthly Patch Tuesday has served as a digital ritual—a time when IT teams brace for another wave of security fixes. In 2024, this ritual has become even more consequential...

A New Phishing Frontier: Tycoon2FA Evolving to Outsmart Microsoft 365 Security Phishing attacks are evolving, and the latest twist comes from the Tycoon2FA phishing kit. Designed as a Phishing-as-a-service (PhaaS) platform, Tycoon2FA is notorious for bypassing multi-factor authentication (MFA)...

Microsoft Vulnerabilities in 2024: A Record-Breaking Year and What It Means for Users and Enterprises As the digital world continues to expand, the software that powers our daily lives grows increasingly complex—and so do its vulnerabilities. In 2024, Microsoft, a cornerstone of global computing...

Microsoft Vulnerabilities in 2024: A Deep Dive into the Record-Breaking Security Landscape The digital world continues to witness an unrelenting surge in cybersecurity threats, and the 12th Annual BeyondTrust Microsoft Vulnerabilities Report for 2024 has just raised the alarm louder than ever...

Microsoft Defender for Identity is stepping up its game by integrating with leading Privileged Access Management (PAM) solutions—a move that promises significant strides in enhancing security around privileged accounts. In today’s cybersecurity landscape, where threats often target accounts with...

Innovative Phishing Tactics Threaten Critical Infrastructure Russian state-backed APT group Storm-2372 has triggered a new alarm in the cybersecurity community by leveraging an ingenious form of device code phishing to sidestep multi-factor authentication (MFA). This sophisticated attack...

In today's digital battleground, where cyber threats are evolving with alarming speed, organizations must continuously fortify their defenses—especially when your productivity hub is the Microsoft Cloud. A recent move by N‑able is proving just that, with the addition of Adlumin Breach Prevention...

The rapid evolution of cloud environments and an explosion of both human and machine identities have compelled enterprises to reevaluate how they secure access to their critical resources. With Microsoft Entra Permissions Management set to retire on October 1, 2025, a fresh chapter in cloud...

In the ever-evolving world of technology, Microsoft stands as a titan, known not just for its operating systems but for its strategic leaps into new tech territories. The latest buzz? Artificial Intelligence (AI). AI: Microsoft's New Frontier Microsoft is placing significant bets on AI, and it’s...

In a bid to raise the bar on identity security, Microsoft is rolling out new, automatically deployed policies targeting a growing vulnerability: Device Code Flow attacks. Featured in the latest edition of Entra 🆔 News (#85), these updates mark another significant step in Microsoft’s ongoing...