Hackers launched 81 million login attempts against Microsoft 365, exploiting Azure CLI and MFA configuration gaps to ...

Microsoft has outlined several mitigations to protect against attacks on multi-factor authentication that will unfortunately make life more difficult for your remote workers. Three years ago, attacks ...

This article delves into the rising tide of MFA failures, the alarming role of generative AI in amplifying these attacks, the growing user discontent weakening our defenses, and the glaring ...

An aggressive password-spraying campaign targeting Microsoft 365 environments generated more than 81 million login attempts over a two-week period.

The attack exploited previously exposed credentials and flaws in enterprises’ multi-factor authentication configurations.

Starting in October, Microsoft will require multifactor authentication (MFA) for all Azure sign ins. Microsoft said the policy change is in line with its current focus on enhancing digital security ...

Business email compromise (BEC) attacks, where hackers hijack finance-related email threads and trick employees into wiring money to the wrong accounts, has led to losses of tens of billions of ...

A sophisticated phishing campaign is targeting organizations that rely on Microsoft’s Active Directory Federation Services (ADFS), using spoofed login pages to harvest credentials and bypass ...

Mitiga says that MFA, even if improperly configured, is no panacea for preventing attackers from abusing compromised credentials. Multi-factor authentication (MFA) is often cited as one of the best ...

Microsoft added that external MFA solutions and federated identity providers will continue to be supported and will meet the MFA requirement if they are configured to send an MFA claim. The ...