Louis Mastelinck previews common Entra ID pitfalls around authentication, Conditional Access, privilege and app consent.

Attackers used Azure CLI and ROPC to expose Microsoft 365 MFA gaps, showing why admins need tighter Conditional Access and ...

The attack abused misconfigured conditional access policies to bypass multi-factor authentication protections.

Assurance, Privacy-Preserving Identity Verification at Scale Across the Microsoft Ecosystem. DENVER, CO, July 02, 2026 (GLOBE NEWSWIRE) -- auth ...

Elastic's argument is that generative AI's default interface – text chat – broke something for security practitioners. Here's ...

Talos details ARToken, a PhaaS panel tied to EvilTokens that supports device code phishing, BEC workflows, SharePoint theft, ...

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) gave federal agencies until Friday to patch an actively ...

Two newly disclosed critical vulnerabilities in Adobe ColdFusion and Langflow join two Joomla extension flaws in CISA's Known ...

ConsentFix and ClickFix attacks steal Microsoft 365 tokens in seconds using fake prompts and OAuth flows. Learn how these MFA ...

Credential stuffing tests stolen password lists against your login form until one matches. Here is how to spot the traffic ...

Why TOGAF is useful for security architecture TOGAF is an enterprise architecture method, not a security framework. That distinction matters. If you try to use TOGAF as if it were a control catalogue, ...

Learn how Microsoft uses AI to proactively harden its own cloud services through the Secure Future Initiative (SFI).