ngo security

  1. How Russian Threat Actors Exploit Microsoft 365 OAuth 2.0 for Cyber Attacks in 2023

    Every time the cybersecurity community thinks they’re getting ahead of attackers, someone comes along and turns a trusted workflow into a digital bear trap. That’s exactly what’s unfolding in the latest campaign orchestrated by Russian threat actors who are gleefully exploiting legitimate...
  2. Protecting Microsoft 365 from Social Engineering & OAuth Attacks in the Modern Age

    We live in an era where simply clicking a video call link could lead to the digital equivalent of inviting a burglar in for tea—and hackers are getting increasingly creative with their invitations, especially when it comes to Microsoft 365 access. The Evolving Art of Social Engineering (or: Why...