OAuth redirection is being repurposed as a phishing delivery path. Trusted authentication flows are weaponized to move users from legitimate sign‑in pages to attacker‑controlled infrastructure.

Threat actors are targeting technology, manufacturing, and financial organizations in campaigns that combine device code phishing and voice phishing (vishing) to abuse the OAuth 2.0 Device ...

Microsoft's public cloud computing platform, Azure, was recently targeted by a cyberattack that led to a multi-hour outage. While a newly announced mandatory two-factor authentication login ...

Microsoft has announced that it is getting rid of some legacy authentication protocols that are used to access files across Microsoft 365 and SharePoint. On a fairly regular basis, Microsoft disables ...

Microsoft has now joined the FIDO Alliance (Fast IDentity Online) which is actively trying to develop a new authentication ecosystem that can be used in place of passwords. There are various methods ...

Security researchers have created a new FIDO downgrade attack against Microsoft Entra ID that tricks users into authenticating with weaker login methods, making them susceptible to phishing and ...