Microsoft Defender Research observed a large-scale credential theft campaign that exemplifies this trend, using code of ...

Cybercriminals are abusing Microsoft's Trusted Signing platform to code-sign malware executables with short-lived three-day certificates. Threat actors have long sought after code-signing certificates ...

Microsoft disclosed a credential theft campaign targeting 35,000+ users at 13,000+ organizations across 26 countries.

The Microsoft Defender Security Research Team has confirmed that a pervasive new authentication code attack is compromising ...

An active campaign from a threat actor potentially linked to Russia is targeting Microsoft 365 accounts of individuals at organizations of interest using device code phishing. The targets are in the ...

Those of you who use a Microsoft account to sign in to Microsoft websites should be aware of an upcoming change that could put your security at risk. In a recent update to a support page on using a ...

Microsoft has reported a sharp rise in phishing attacks using QR codes and CAPTCHA pages to bypass security tools, alongside a new 'ClickFix' scam that tricks users into installing malware via fake ...