Tag: Microsoft 365
Forgotten service accounts cracked open 28 Microsoft 365 tenants
Proofpoint linked 28 Microsoft 365 tenant intrusions to unrotated service accounts still holding default passwords.
GhostCode phish turns a device code into a Microsoft 365 takeover
GhostCode abuses Microsoft's device authorization flow to obtain tokens and register attacker hardware inside a victim tenant.
Microsoft moves Teams and M365 web users to new domains
Firewall and proxy rules that allow the old addresses will need updating before early October.
BigBear 2.0 phishing panel reveals thousands of stolen Microsoft sessions
CloudSEK says it reached the admin panel of a phishing service holding thousands of session cookies stolen from Microsoft 365…
Phishing kit rides genuine Docusign mail to swipe Microsoft sessions
The NovaCookies phishing service uses genuine Docusign notifications to steal Microsoft 365 sessions in real time.
Phishing kit bypasses 2FA across 4,500 corporate domains
A two-year phishing-as-a-service campaign bypasses 2FA across more than 4,500 Microsoft 365 domains.
Defense supplier IEH exposes export-controlled data in phishing hit
IEH Corporation told the SEC that a phished employee's Microsoft 365 mailbox exposed engineering files and potentially export-controlled technical data.
Voicemail lures fuel AitM wave aimed at payroll inboxes
A voicemail-themed AitM phishing wave is taking over Microsoft 365 accounts to harvest payroll and finance email.