Microsoft 365 phishing MFA bypass platform BigBear 2.0 compromised 258 organizations across 40+ countries by using custom JavaScript to disable FIDO2 hardware key authentication before stealing ...

An Evilginx2-based phishing-as-a-service (PhaaS) campaign known as BigBear 2.0 has compromised the Microsoft 365 accounts of ...

Exchange Server Subscription Edition now supports additional Outlook clients with AD FS-based Modern Authentication, extending OAuth-based sign-in options for organizations running Exchange ...

MFA makes account takeover harder, but attackers are increasingly targeting the recovery processes used to reset passwords ...

Passkey-themed social engineering is being used to compromise identities and enable broader cloud attacks. Learn how threat actors establish MFA persistence, abuse Microsoft Graph for reconnaissance, ...

Microsoft has made Azure Virtual Desktop Hybrid generally available. Session hosts run on customer hardware through Azure Arc ...

Microsoft says threat actors linked to ShinyHunters, Helix, and other extortion gangs are using passkey and single ...

The CVSS 10.0 Baseline On September 3, 2026, Microsoft disclosed nine vulnerabilities outside the standard Patch Tuesday cycle. Two of these carry a CVSS 10.0 rating: CVE-2026-83711, an authorization ...

Anthropic's September 2026 threat report reveals how AI is enabling faster, larger, and more autonomous cyberattacks, model ...

Morningstar Quantitative Ratings for Stocks are generated using an algorithm that compares companies that are not under analyst coverage to peer companies that do receive analyst-driven ratings.

National security, unlocked. Each Thursday, host Mary Louise Kelly and a team of NPR correspondents discuss the biggest national security news of the week. With decades of reporting from battlefields ...