Microsoft security chief Charlie Bell says the SFI's 28 objectives are “near completion” and that 11 others have made ...

Russian threat actors have been abusing legitimate OAuth 2.0 authentication workflows to hijack Microsoft 365 accounts of ...

Microsoft secures MSA and Entra ID with Azure Confidential VMs + HSM, preventing token forgery and reducing breach risks.

Microsoft confirms that the weekend Entra account lockouts were caused by the invalidation of short-lived user refresh tokens ...

Microsoft has announced all Azure sign-ins will soon have to use multi-factor authentication (MFA) to enhance account security. The authentication methods offered by the Azure platform include ...

and tried to steal account credentials and then hijack the victims' Microsoft Azure cloud infrastructure.… After taking over victims' accounts, the miscreants signed into new devices using ...

The suspected Russian hackers behind the massive SolarWinds attack attempted to hack CrowdStrike through a Microsoft reseller’s Azure account but were ultimately unsuccessful, CrowdStrike says.