Microsoft said the incident demonstrated how threat actors were using AI agents to automate existing attack methods and ...

Microsoft said China-linked Storm-0940 used AI agents to attack hundreds of organisations worldwide. The campaign accelerated ...

Storm-0940 used the agentic AI penetration testing framework to automate attacks and “reach more than 2,250 tenants at 2,900 sign-in attempts per minute,” Microsoft researchers said.

A China-linked hacking group used an AI-based penetration-testing tool to breach ConnectWise, a US IT services firm, ...

Attackers bypass MFA via OAuth consent phishing, tricking users into granting app access. Learn how to audit grants and tighten M365 policies.

Experts suggest that Copilot for legal is likely to achieve broad adoption, and could pose a threat to point solutions that don’t differentiate from general-purpose AI.

Attackers don’t always need to exploit a vulnerability to gain access to an organization. Sometimes, they already have credentials that work. Microsoft’s 2026 Digital Defense Report provides a closer ...

Create a Windows 11 local account using Rufus or by switching your settings. Microsoft blocked the BypassNRO trick, but you ...

Russia’s GRU hacked a NATO naval shipbuilder, aircraft engine manufacturer, and law enforcement agency using HOOKEDGE, a ...

UK neocloud provider Nscale is set to lose Microsoft as the anchor tenant at its Loughton data center in Essex, after delays ...

Square Enix has warned "Final Fantasy 14" players after detecting unauthorized access involving multiple Square Enix accounts ...