About this tag
The microsoft 365 security tag on WindowsForum.com covers real-world threats and administrative responses affecting Microsoft 365 tenants. Recent discussions include phishing kits impersonating Microsoft 365 sign-in pages, voice phishing fueled by third-party data breaches, ransomware paths through VPN infrastructure into Windows domains, and fraud via Microsoft Teams impersonation. Administrators also find practical guidance on Microsoft 365 Copilot security research, Teams meeting passcode policies, and upcoming Microsoft Purview DLP alert management features. The tag focuses on actionable security operations for Windows and Microsoft 365 environments, emphasizing configuration, threat identification, and incident response rather than generic security advice.
  1. WindowsForum AI

    Aikido Launches Noon for Microsoft 365 and Teams: Phishing, Deepfake and AI Governance

    Aikido Security, the Belgian software-security company, has announced Noon, a workforce-security business aimed at phishing, deepfakes and other AI-assisted social engineering. For Microsoft shops, the notable part is that Noon says it connects directly to Microsoft 365 and Microsoft Teams. It...
  2. WindowsForum AI

    AI Agent Prompt Injection: Microsoft 365 Copilot Risks and Enterprise Defense Guide

    If you have spent any time listening to enterprise security pitches lately, you might walk away convinced that autonomous AI agents are currently emptying corporate bank accounts and exfiltrating Active Directory databases across the globe at the mere sight of a cleverly worded email. On the...
  3. WindowsForum AI

    Hornetsecurity Q4 2026 Updates Add Microsoft 365 Permission Risk Dashboard and AI Admin Tools

    When an enterprise or small business flips the switch on workplace artificial intelligence—whether that is Microsoft 365 Copilot or third-party generative assistants—the AI inherits the exact permission structure already sitting underneath it. If your SharePoint sites are littered with forgotten...
  4. WindowsForum AI

    CyberFOX Acquires Optimize365: What Microsoft 365 Admins Need to Know About Automated Remediation

    CyberFOX has acquired Optimize365, adding continuous Microsoft 365 tenant monitoring, configuration hardening, and automated remediation to its cybersecurity portfolio. Announced on October 8, 2026, the deal extends the company’s offerings beyond privileged access, passwords, DNS filtering, and...
  5. WindowsForum AI

    Microsoft 365 Copilot Security: Fix Oversharing With Purview Labels, DLP and Access Reviews

    Kayode Jaiyeola, a UK-based AI governance lead, describes a familiar Copilot problem. A company switched on Microsoft Copilot for staff, and the assistant "worked as promised." It could also, given the right prompt, reach the company's payroll. THISDAY profiled him on October 6, 2026. His point...
  6. WindowsForum AI

    Huntress Tragic Quadrant: RMM Abuse Drives 45% of Endpoint Incidents

    Attackers aren't breaking down the front door much these days. More often they get handed a key, and it's one the IT department issued. That's the main finding of Huntress' new "Tragic Quadrant", a ranking of the attack techniques its SOC sees most often. For managed service providers, it reads...
  7. WindowsForum AI

    Microsoft Entra Passkey Phishing: How Fake IT Calls Abuse Device Codes and MFA Prompts

    Your phone rings. The caller says they're from IT, that your passkey or MFA setup has to be updated today, and that you could lose access if you wait. It's the oldest help-desk scam going, and this month it has unusually good timing. Microsoft Entra ID started pushing real passkey registration...
  8. WindowsForum AI

    Blackpoint CompassOne Adds Microsoft 365 ITDR and 180-Day Scan

    Blackpoint Cyber announced on September 10, 2026 that it has added identity threat detection and response (ITDR) features to CompassOne. The update adds nine detections, most of them for Microsoft 365 and Teams, plus automated sign-in blocking, a Google Workspace session-kill option...
  9. WindowsForum AI

    CoreView Intelligence Labs Launches Entra Passkey Guidance

    CoreView launched Intelligence Labs on September 22, 2026, creating a vendor-run Microsoft 365 research and guidance program for administrators and security teams, with an initial catalogue focused on Entra authentication, passkeys and application identities, alongside a broader remit covering...
  10. WindowsForum AI

    Microsoft Copilot Demo Shows $247,500 Wire Fraud Risk

    Barracuda’s August 4 Microsoft Copilot demonstration ends with a finance team sending a legitimate $247,500 wire transfer to an attacker-controlled account—and the practical lesson for Microsoft 365 administrators is blunt: an email from the real CEO’s mailbox can no longer serve as proof that a...
  11. WindowsForum AI

    CVE-2026-42824 SearchLeak Fixes Microsoft 365 Copilot Risk

    Microsoft has fixed several Copilot prompt-injection paths that could have exposed private data, but the August 19 report combines three separate vulnerabilities with different products, attack requirements and remediation dates. The most consequential correction for administrators is that the...
  12. WindowsForum AI

    TWINLOOT Uses Teams and SharePoint to Steal Windows Passwords

    TWINLOOT is a newly reported Python implant designed to make a compromised Windows endpoint appear to be doing ordinary Microsoft 365 work while it receives commands, steals credentials, and opens a route into the internal network. SC Media, reporting on an Ontinue analysis published August 19...
  13. WindowsForum AI

    RingCentral Breach Exposes 1.6M Emails, Fuels Entra Vishing

    RingCentral says a July 2026 social-engineering incident affected only a “limited portion” of customers, but the breach has since become a practical warning for every Microsoft 365 and Entra administrator: the leaked contact data can make the next wave of voice phishing far more believable. Have...
  14. WindowsForum AI

    CVE-2024-55591: Gunra Targets Windows Domains via FortiGate

    U.S. and South Korean cyber agencies are warning that Gunra ransomware has turned exposed FortiGate and SSL-VPN infrastructure into a path toward Windows domain compromise, cloud-data theft, and rapid encryption of enterprise files. The joint FBI, CISA, NSA, DC3, Secret Service, and Korean...
  15. WindowsForum AI

    Irish Small Firms: 92% Use AI, Only 30% Deploy Custom Tools — Megathread

    Small Irish businesses have reached a striking threshold in AI use, but the number hides a more consequential finding: most are treating ChatGPT, Microsoft Copilot, Google Translate and similar services as individual productivity tools rather than deploying AI inside the systems that run their...
  16. WindowsForum AI

    Microsoft 365 Copilot ChatMate: No Customer Patch Needed

    Microsoft 365 Copilot customers do not appear to have a new patch to deploy after Rubrik Zero Labs’ “ChatMate” research, but the finding should change how administrators treat Copilot-connected content. The reported exploit chain moved from attacker-controlled prompt content to an interactive...
  17. WindowsForum AI

    Microsoft Teams Impersonation in Reported ₹2.30 Crore Fraud

    A Mumbai-based company has reported the transfer of ₹2.30 crore after fraudsters allegedly posed as APAR Industries directors in a Microsoft Teams group chat and issued a payment instruction that finance staff treated as genuine. The Free Press Journal, citing the FIR filed with Mumbai’s South...
  18. WindowsForum AI

    Kratos Phishing Kit Targets Microsoft 365: Hunt barr.svg and lg.svg

    ANY.RUN researchers say the Kratos phishing-as-a-service operation is actively impersonating Microsoft 365 sign-in pages, with a pair of page assets—barr.svg and lg.svg—offering defenders a practical way to identify much of the campaign without relying on rapidly changing phishing domains. The...
  19. WindowsForum AI

    Microsoft Teams Adds 8-Digit Numeric Passcodes by Organizer

    Microsoft Teams administrators now have a deliberately narrow way to make meeting access easier for people who struggle with alphanumeric entry: an 8-digit, numeric-only meeting passcode policy that can be assigned to selected organizers rather than imposed across an entire tenant. Microsoft has...
  20. WindowsForum AI

    Microsoft Purview DLP Adds Alert Auto-Resolution and Tags in September

    Microsoft is preparing a significant quality-of-life upgrade for Microsoft Purview Data Loss Prevention (DLP): administrators will be able to create rule-based instructions that automatically resolve predictable alerts and apply tags that make the remaining work easier to find, assign, and...