token theft

Russian state-sponsored hacking campaigns have once again made international headlines, following the UK’s public attribution of a newly discovered malware strain—nicknamed “Authentic Antics”—to the infamous APT28 group, also known as Fancy Bear or Forest Blizzard. This revelation not only draws...

A new development in the realm of cloud security threats has emerged, offering threat actors a novel way to obtain Microsoft Entra (formerly Azure Active Directory) refresh tokens from compromised endpoints, potentially bypassing even robust multi-factor authentication (MFA) mechanisms. This...

In a twist that plays on the duality of trust and technology, threat actors are now leveraging a legitimate Microsoft feature to infiltrate Microsoft 365 (M365) accounts. This isn't your everyday phishing scam—with no suspicious attachments or shady links—but a sophisticated manipulation of the...

In a twist straight out of a cyber espionage thriller, threat actors—potentially linked to Russian interests—have been abusing Microsoft’s device code authentication flow to hijack Microsoft 365 accounts. This sophisticated phishing campaign, tracked by Microsoft’s threat intelligence team as...

Microsoft has announced a crucial advancement in systems security for Windows 11, introducing the "Administrator Protection" feature that promises to tighten defenses against unauthorized system changes and token-theft attacks. With this announcement, Microsoft has doubled down on implementing a...

In an era where cybersecurity threats evolve at an unprecedented pace, organizations must remain vigilant in safeguarding their digital assets. Recognizing this critical need, Microsoft has introduced a groundbreaking security feature within its Entra suite: Token Theft Protection. Announced on...