Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
ConnectWise Cloud Backup Credential Compromise: 173 M365 Tenants Breached — Detection and Remediation Guide
Introduction Security researchers are tracking an active campaign in which unknown threat actors have abused a compromised Microsoft 365 cre...
CrowdStrike Falcon Data Security for SaaS: Defending Sensitive Data in Microsoft 365 — A Practitioner's Guide
The Problem Every M365 Shop Has — Whether They Admit It or Not CrowdStrike has announced Falcon Data Security for SaaS, extending its data s...
TA419 AitM Phishing Campaign Targets U.S. AI Policy Experts: Detection and Defense Guide for Microsoft 365 Tenants
Introduction A China-nexus cyber espionage group tracked as TA419 has been attributed to a series of adversary-in-the-middle (AitM) social e...
Microsoft KB5002907 Pulled After Deactivating Office 2016/2019 — Emergency Rollback and License Recovery Guide
Microsoft has paused the rollout of the KB5002907 Microsoft 365 update after widespread reports that it deactivated — and in some cases comp...
Mirage2FA PhaaS Kit: Microsoft 365 Session Hijacking via AiTM — OTX Pulse Analysis & Detection Pack
Mirage2FA PhaaS Kit: Microsoft 365 Session Hijacking via AiTM — OTX Pulse Analysis & Detection Pack Threat Summary Live OTX pulse data confi...
Mirage2FA AiTM PhaaS + T-Mobile Smishing Credential Campaigns: OTX Pulse Analysis — Session Hijack Detection Pack
Mirage2FA AiTM PhaaS + T-Mobile Smishing Credential Campaigns: OTX Pulse Analysis — Session Hijack Detection Pack Threat Summary Two concurr...
N0va Phishkit AiTM Campaigns Target US and EU Enterprises: Detection and Identity Hardening Guide
Introduction A new phishing kit tracked as N0va is actively targeting organizations across North America and Europe, and it represents the l...
ShinyHunters Passkey Phishing Campaign Targets Microsoft 365: Detection and Defense Guide for SSO Social Engineering Attacks
Introduction Microsoft has confirmed that threat actors affiliated with ShinyHunters, Helix, and other extortion-focused criminal groups are...
BigBear 2.0 Evilginx2 PhaaS Campaign: AiTM Microsoft 365 Credential Theft — OTX Detection Pack
BigBear 2.0 Evilginx2 PhaaS Campaign: AiTM Microsoft 365 Credential Theft — OTX Detection Pack A newly rebranded phishing-as-a-service (Phaa...