token theft

In today's digital landscape, even legitimate features designed to enhance usability can turn into liabilities in the wrong hands. Recent intelligence indicates that threat actors—likely with connections to Russian cyber groups—are abusing Microsoft’s Device Code Authentication feature to...

In a twist straight out of a cyber espionage thriller, threat actors—potentially linked to Russian interests—have been abusing Microsoft’s device code authentication flow to hijack Microsoft 365 accounts. This sophisticated phishing campaign, tracked by Microsoft’s threat intelligence team as...

Microsoft has announced a crucial advancement in systems security for Windows 11, introducing the "Administrator Protection" feature that promises to tighten defenses against unauthorized system changes and token-theft attacks. With this announcement, Microsoft has doubled down on implementing a...