Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
BigBear 2.0 Evilginx2 PhaaS Campaign: AiTM Microsoft 365 Credential Theft — OTX Detection Pack
BigBear 2.0 Evilginx2 PhaaS Campaign: AiTM Microsoft 365 Credential Theft — OTX Detection Pack A newly rebranded phishing-as-a-service (Phaa...
Help Desk Vishing + AitM Token Theft: Defending Microsoft 365 Against Executive-Targeted Data Theft and Extortion
The Threat: Voice-Based Social Engineering Meets Token Theft Threat hunters have disclosed a widespread data theft and extortion threat clus...
Exchange Online Outage: Email Delays and 'Server Busy' Errors — Defender's Response and Resilience Guide
Exchange Online Outage: Email Delays and 'Server Busy' Errors — Defender's Response and Resilience Guide Microsoft is actively working to re...
NovaCookies AitM Phishing Kit Abuses DocuSign to Steal Microsoft 365 Sessions — Detection and Hardening Guide
Introduction Security researchers at Island have disclosed a new subscription-based adversary-in-the-middle (AitM) social engineering toolki...
Microsoft Classic Outlook Theme for New Outlook: Change Management and Security Implications for M365 Admins
Introduction Microsoft has begun rolling out a Classic Outlook theme for users of Outlook on the web and the New Outlook for Windows, per re...
Russia-Linked Espionage Clusters Abuse OAuth Device Code Flow and WhatsApp: Detection and Defense Guide
Overview Google's Threat Intelligence Group (GTIG) has disclosed tracking of three separate suspected Russia-linked cyber espionage clusters...
PhantomStealer Injector + Mirage2FA AitM PhaaS: OTX Pulse Analysis — Credential Theft Detection Pack
Threat Summary Two converging credential-theft operations surfaced in today's OTX feed, and together they map the full modern identity-compr...
Microsoft 365 Search Outage Hits Outlook, SharePoint, and OneDrive — Defender's Response and Continuity Playbook
What Happened Microsoft has confirmed an active service incident degrading search functionality across multiple Microsoft 365 workloads. Per...
IEH Defense Contractor Breach: M365 Inbox Compromise via Social Engineering — Detection and Hardening Guide
U.S. defense and aerospace manufacturer IEH Corporation has disclosed a breach stemming from a social engineering attack that gave threat ac...