You could previously bypass creating or signing in with a Microsoft account when setting up Windows 11.

Attackers don’t always need to exploit a vulnerability to gain access to an organization. Sometimes, they already have credentials that work. Microsoft’s 2026 Digital Defense Report provides a closer ...

Learn More' shortcut to local setup reportedly patched server-side, leaving users with more involved workarounds ...

Email from MicrosoftThis happened during this year's Golden Week."I got this email from Microsoft, is it okay?"When I looked ...

TeamFiltration targeted over 5,700 Microsoft 365 accounts across 28 tenants, compromising seven service accounts with default passwords.

Storm-0940 used the agentic AI penetration testing framework to automate attacks and “reach more than 2,250 tenants at 2,900 sign-in attempts per minute,” Microsoft researchers said.

Hackers used a stolen ConnectWise Cloud Backup credential to sign in to 173 Microsoft 365 partner and customer tenants, ...

More than 40,000 organisations have received fake calendar invitations designed to steal Microsoft account credentials, ...

Hackers used password spraying to breach unmonitored Microsoft 365 accounts, accessing email, files and cloud apps.

Microsoft's X account was hijacked to promote a crypto pump-and-dump scheme, exposing its more than 13 million followers to a scam campaign.

Are you struggling with situations like this?An employee's resignation date has been set, and you have been asked to stop ...

Phishing that impersonates well‑known brands entered a new phase in the third quarter, with Microsoft accounting for 33 per ...