Attackers used Azure CLI and ROPC to expose Microsoft 365 MFA gaps, showing why admins need tighter Conditional Access and ...

Louis Mastelinck previews common Entra ID pitfalls around authentication, Conditional Access, privilege and app consent.

Why TOGAF is useful for security architecture TOGAF is an enterprise architecture method, not a security framework. That distinction matters. If you try to use TOGAF as if it were a control catalogue, ...

The attack abused misconfigured conditional access policies to bypass multi-factor authentication protections.

Assurance, Privacy-Preserving Identity Verification at Scale Across the Microsoft Ecosystem. DENVER, CO, July 02, 2026 (GLOBE NEWSWIRE) -- auth ...

Hackers launched 81 million login attempts against Microsoft 365, exploiting Azure CLI and MFA configuration gaps to ...

Attackers behind a password-spraying campaign targeting Microsoft Office 365 accounts have amassed dozens of victims by abusing a deprecated feature in OAuth 2.0 to ...

What happened A massive password spray campaign is targeting Microsoft 365 environments through Azure CLI authentication. Huntress warned that threat actors made more than 81 million login attempts ...

The FBI warns about Kali365, a phishing scam targeting Microsoft 365 accounts that can bypass multifactor authentication ...

The Federal Bureau of Investigation (FBI) issued a Public Service Announcement (PSA), warning the public about an emerging Phishing1-as-a-Service2 (PhaaS) platform called Kali365. First seen in April ...

The FBI has warned Microsoft 365 users about Kali365, a phishing tool capable of bypassing multi-factor authentication.

In late May, the FBI warned U.S. residents of a new phishing scam, Kali365 targeting Microsoft 365 users. Here's how to ID, what scammers are after.