multi-factor authentication

A wave of highly sophisticated phishing attacks has put Microsoft 365 users—and the very foundations of modern email security—at risk, exposing a perilous paradox: the same technologies designed to protect cloud productivity platforms are now being systematically exploited to facilitate...

Microsoft has introduced passkeys as a new verification method for user accounts, allowing sign-ins using facial recognition, fingerprints, or device PINs. This feature is compatible across Windows, Apple, and Google platforms. Passkeys utilize cryptographic key pairs, with one key stored on the...

The evolution of phishing campaigns in the cloud era has introduced a new breed of attacks that are increasingly hard to spot, even for seasoned security professionals. Among these, a recent campaign targeting Microsoft 365 logins stands out for its cunning use of Microsoft OAuth applications...

Phishing campaigns continue to evolve, adapting to security systems and adopting new tactics to dupe even vigilant users. Recent findings have uncovered a sophisticated Microsoft MFA phishing scheme that leverages the OAuth authorization framework—specifically, Microsoft OAuth applications—to...

Phishing campaigns have always shaped themselves around the contours of new technology, but the latest surge targeting Microsoft OAuth applications marks a seismic shift in both attacker strategy and the effectiveness of their exploits. In 2025, security researchers uncovered a wave of hybrid...

Phishing campaigns have always evolved in tandem with advances in enterprise security, but the latest wave targeting Microsoft OAuth applications represents a stunning leap in both sophistication and effectiveness. This ongoing campaign, first identified in early 2025, exemplifies a new breed of...

West Virginia University has recently announced a sweeping change to its digital access protocols: from now on, all Microsoft 365 and Google Workspace services will require an active WVU Login account mediated through the university’s new identity management system, Okta. This transition marks a...

Attackers are rapidly evolving their playbook in the ongoing battle over account security, and the latest threat landscape facing Microsoft 365 users underscores just how sophisticated these threats have become. Cybersecurity firm Proofpoint recently sounded the alarm on a new tier of phishing...

Microsoft’s decision to cut autofill capabilities from its Authenticator app has sent ripples through the cybersecurity community, leaving countless users seeking an alternative for two-factor authentication (2FA) management. On the very day Microsoft began phasing out this prominent feature...

When it comes to disaster recovery in Microsoft 365, much of the conversation historically has revolved around technical redundancies: backup strategies, automated failover, and robust data protection mechanisms. Yet, as underscored by industry experts John O’Neill Sr. and Dave Kawula during a...

In the ever-evolving world of cloud productivity, Microsoft 365 sits at the heart of business operations for organizations large and small. Its robust suite—ranging from Exchange Online to SharePoint and Teams—powers collaboration and drives efficiency at remarkable scale. Yet, beneath the buzz...

When considering disaster resilience for Microsoft 365, the discussion often revolves around infrastructure, backup, and failover. However, insight from leading industry experts reveals a more foundational vulnerability—identity. At a pivotal summit hosted by Virtualization & Cloud Review, IT...

When it comes to ensuring the continuous availability and resilience of Microsoft 365 environments, much of the traditional advice centers around robust backup strategies and disaster recovery planning. However, as highlighted in a recent expert session at a Virtualization & Cloud Review summit...

Identity has rapidly become the new battleground in the fight for organizational security, especially as cybercriminals innovate to sidestep robust perimeter defenses. While firewalls, endpoint protection, and phishing detection continuously improve, attackers are leveraging stolen or...

In the early hours of an otherwise ordinary workweek, the headlines told a chilling story: KNP, a storied logistics company in the United Kingdom with 158 years of history, shuttered operations overnight due to a catastrophic ransomware attack. This collapse is more than a cautionary tale—it’s a...

A Microsoft account has evolved far beyond simply serving as a login credential for Windows 11. Under the surface, it powers a sophisticated suite of features—some beneficial, others potentially intrusive—that fundamentally shape the way users interact with their PCs. Many of these functions...

In recent months, the aviation and transportation sectors have become prime targets for sophisticated phishing attacks, particularly those involving Business Email Compromise (BEC) schemes. Cybercriminals are exploiting executive email accounts to deceive customers and partners into transferring...

In the second quarter of 2024, Microsoft emerged as the most impersonated brand in phishing attacks, accounting for 57% of such incidents, according to Check Point Research. This significant increase underscores the growing trend of cybercriminals targeting major technology companies to exploit...

For many Windows users, juggling passwords across dozens of websites remains an ongoing challenge—even in an era of fingerprint logins and two-factor authentication. Microsoft Edge, the default browser for Windows, aims to tackle this issue with a robust yet user-friendly password management...

Saving and managing passwords has become an essential component of the modern internet browsing experience, reducing friction for users and improving overall online security. Microsoft Edge, the default browser in Windows, offers robust password management capabilities that are tightly...