microsoft 365 security

Attackers are upping their game in the world of phishing, combining the power of artificial intelligence and native cloud tools to build attacks that are nearly indistinguishable from legitimate IT workflows. The latest trend, “native phishing,” leverages trusted Microsoft 365 (M365)...

In recent developments, cybersecurity firm East Security has identified a sophisticated phishing campaign that impersonates Microsoft's multi-factor authentication (MFA) processes. This attack leverages QR codes to deceive users into divulging their Microsoft 365 credentials, highlighting the...

Phishing attacks remain a relentless challenge in the digital security landscape, and for organizations relying on Microsoft 365, the stakes have never been higher. As business email compromise, credential theft, and weaponized attachments evolve—often powered by artificial intelligence—security...

In today's digital landscape, Microsoft 365 stands as a cornerstone for organizational productivity, offering a suite of tools that facilitate communication, collaboration, and data management. However, recent analyses reveal that many organizations may be underestimating the vulnerabilities...

The growing sophistication of phishing attempts targeting Microsoft 365 and Outlook users underscores a significant challenge facing both individual users and IT administrators: even widely trusted productivity tools are susceptible to well-crafted scam campaigns that can bypass traditional...

Phishing attacks have evolved far beyond suspicious links in emails or obvious malware-laden attachments; today’s cybercriminals are engineering schemes that bypass even the most robust inbox filters, preying on the everyday habits and default settings trusted by countless Microsoft 365 and...

Cybersecurity professionals worldwide have watched for years as the battle between defenders and attackers has grown increasingly sophisticated. But a new wave of threats is now on the horizon—one where generative AI acts as the great equalizer, equipping even novice cybercriminals with the...

In recent years, cybercriminals have increasingly exploited digital calendars to orchestrate sophisticated phishing attacks, particularly targeting Microsoft 365 users. These scams often involve deceptive calendar invitations that appear legitimate but are designed to steal sensitive information...

Microsoft 365 has become the digital heart of modern organizations, supporting operations that range from email and file storage to real-time collaboration and regulatory compliance. Despite its reputation for robust security and the billions of dollars Microsoft invests in cybersecurity...

Email bombing, a form of cyberattack where attackers flood a target's inbox with a massive volume of emails, has become an increasingly prevalent threat. This tactic aims to overwhelm users, making it challenging to access legitimate communications and potentially disrupting organizational...

There is no denying that Microsoft 365 is the digital engine room for modern businesses—fueling everything from email communications and calendaring to collaborative document editing and video meetings. Organizations of all sizes, across continents and industries, have woven the fabric of...

Microsoft’s ongoing investment in enterprise security takes a significant leap forward with the rollout of a sophisticated feature in Microsoft Defender for Office 365: advanced detection and mitigation of email bombing attacks. As cybercriminal tactics grow in complexity and frequency...

For many organizations, the expectation is that internal communications on their Microsoft 365 tenants are inherently more trustworthy—after all, who would question an authentication-free email from the company’s own domain? Yet a recent investigation by the Varonis Managed Data Detection and...

In a sobering development for the cloud security landscape, new research has exposed how Microsoft 365’s Direct Send feature—a tool primarily designed for seamless internal communication—has become a significant vector for phishing attacks. As organizations of all sizes deepen their reliance on...

Phishing attacks continue to challenge organizations worldwide, evolving in sophistication and leveraging the very tools designed to enhance digital communication. An alarming new campaign has emerged wherein cybercriminals exploit Microsoft 365’s Direct Send feature—traditionally trusted for...

Hackers continue to evolve their tactics, and with sophisticated attacks targeting even the most mature enterprise technology stacks, the recent exploitation of Microsoft 365’s Direct Send feature underscores the persistent cat-and-mouse game between IT teams and cybercriminals. Direct Send, a...

A sophisticated phishing campaign has been exploiting Microsoft 365's Direct Send feature, targeting over 70 organizations across various sectors in the United States since May 2025. This attack underscores the evolving tactics of cybercriminals and highlights the need for organizations to...

Scaling new heights in the world of cloud security management, UK-based Inforcer has opted to plant its Nordic headquarters in the heart of Copenhagen. This strategic decision marks not merely an expansion, but a nuanced alignment with the unique needs of Managed Service Providers (MSPs) and...

Hornetsecurity has taken a significant stride in the cybersecurity domain with the introduction of its AI Cyber Assistant, a feature-packed evolution within its 365 Total Protection Plan 4 for Microsoft 365 environments. This latest innovation directly addresses the persistent challenges facing...

In an era defined by rapid digital transformation, organizations find themselves in an arms race against increasingly sophisticated cyber threats. Nowhere is this more acutely felt than within the Microsoft 365 ecosystem, whose omnipresence in enterprise workflows makes it a prime target for...