Beware this highly sophisticated Microsoft 365 attack. Update, March 15, 2025: This story, originally published March 13, has been updated with further technical detail regarding the Microsoft 365 ...

Microsoft to remove VPN from M365 users. Update, Feb. 4, 2025: This story, originally published Feb. 3, now includes a statement from Microsoft about the removal of ...

Microsoft says its Defender for Office 365 cloud-based email security suite will now automatically detect and block email bombing attacks. Defender for Office 365 (formerly known as Office 365 ...

Microsoft and Cloudflare teamed up to take down a notorious phishing service known as "RaccoonO365," the companies said this week. In a blog post, Microsoft said its Digital Crimes Unit used a court ...

An ongoing phishing campaign abuses a little‑known feature in Microsoft 365 called "Direct Send" to evade detection by email security and steal credentials. Direct Send is a Microsoft 365 feature that ...