remote work security

Russian hackers have figured out a way to weaponize OAuth 2.0 authentication—yes, that protocol you trusted implicitly last Tuesday when you breezed through another Microsoft 365 login screen—turning what should be a knight in shining armor into a digital Trojan horse galloping straight through...

Seven years ago, when Microsoft began its journey towards a Zero Trust security model, “trust but verify” was tossed out the window like an old Clippy paperclip, and “never trust, always verify” took its place. If you’re picturing a fortress of firewalls and VPN tunnels coiled around Microsoft’s...

They say trust is the cornerstone of any relationship—especially if that relationship is between you, the internet, and a determined Russian adversary with a penchant for phishy invitations and suspicious requests for OAuth codes. Phishing in the OAuth Era: New Tricks for Old Hackers When we...

Microsoft 365 users—especially those with links to Ukraine or human rights circles—have recently been finding themselves the unwitting stars in an international cyber-thriller: Russian-linked hackers are back, and this time, they've upgraded from phishing Netflix logins to abusing Microsoft's...

If you work for a U.S. government agency and you haven’t heard about CISA’s Binding Operational Directive 25-01, you might want to check your inbox, or possibly your junk folder—because ignoring this directive is about as hazardous to your career as leaving “12345” as your admin password...

We live in an era where simply clicking a video call link could lead to the digital equivalent of inviting a burglar in for tea—and hackers are getting increasingly creative with their invitations, especially when it comes to Microsoft 365 access. The Evolving Art of Social Engineering (or: Why...

Feeling nostalgic for those halcyon days when logging into your enterprise apps felt optional? Well, savor the memory—Microsoft just flipped the script. In its ongoing tug-of-war with shadowy cyber villains, the tech giant has unleashed the “Reauthentication Every Time Policy” for Entra ID, an...

The best-laid plans of regulators and tech titans alike have gone pixel-shaped, and the digital world is barely hanging onto its cookies. Welcome to the wildest PSW episode yet—where government unraveling meets generative AI hijinx, bot chaos is the new business model, and cybercriminals treat...

It’s not every year that cybersecurity professionals brace themselves for a headline so eye-watering it deserves a frame around the server room: Microsoft, titan of the tech world, has shattered its own vulnerability record, clocking in at a whopping 1,360 reported security flaws across its...

Microsoft’s battle lines in the war against online fraud are drawn in digital code, threat intelligence dashboards, and, perhaps most importantly, in the evolving hearts and minds of users worldwide. The world’s most valuable software company isn’t content to simply rest on its laurels as a...

Microsoft is making a bold move that aims to significantly reduce one of Office’s longstanding vulnerabilities. In a bid to enhance security and protect users, Microsoft 365 for Windows is set to disable ActiveX content by default in its flagship applications—Word, Excel, PowerPoint, and Visio...

Inside the New Wave of Cyberattacks Exploiting Microsoft Teams to Infect Windows PCs Microsoft Teams has become indispensable in modern workplaces, a hub for collaboration and communication. Yet, this very platform trusted by millions has transformed into a battleground where hackers wage...

Hackers Exploit Unsecured Webcams for Cyberattacks – What Windows Users Need to Know In today’s digital landscape, no device is truly isolated from cyber threats—even something as ubiquitous as a webcam. According to a recent report by TechRadar, hackers have been spotted using unsecured webcams...