Microsoft issues a final warning as Entra ID memberOf retires tomorrow, affecting dynamic groups and entitlement management ...

Organizations using Microsoft Graph to handle files in SharePoint Online or OneDrive have changes to review before April 1, 2027.On October 8, 2026, Microsoft announced the retirement of ...

A high-severity vulnerability in Microsoft Authenticator for Android let a malicious app with no Android permissions steal ...

Hackers used stolen Microsoft 365 session tokens to breach 79 organizations, recording 497 successful sign-ins and 200,000+ ...

The pre-authenticated URLs used in some Microsoft Graph file APIs are being deprecated, and changes to their behavior will ...

China hackers agentic AI attack breached 2,250 Microsoft 365 tenants by exploiting a stolen ConnectWise Cloud Backup ...

Microsoft fixed a high-severity Android Authenticator flaw that could let malicious apps steal work account access tokens.

A security flaw in Microsoft Authenticator for Android could allow malicious apps to steal authentication tokens linked to ...

Security researchers discovered a flaw in Microsoft Authenticator for Android that allowed malicious apps to pose as trusted Microsoft software and obtain authentication tokens, potentially opening ...

Microsoft fixed an Android Authenticator flaw that lets malicious apps impersonate Teams and obtain work account tokens under ...

The incident involved unauthorized application authentication and privilege escalation, prompting service suspensions as ConnectWise investigates the scope of the activity.

Storm-0940 used OAuth apps to access data via Microsoft Graph. Authentication activity detected in multiple customer environments. Data access by the threat actor remains unconfirmed. Group previously ...