ThreatVectr
Tag

#Microsoft 365

40 stories taggedMicrosoft 365 · page 3 of 3.

Full frame, photoreal news-editorial image of a laptop screen showing a generic corporate sign-in code entry page in a dimly lit office, with a smartphone besid
Identity & Access

Fake Teams Invites Are Tricking Microsoft 365 Users Into Handing Over Their Accounts

A phishing crew is skipping the fake login page and walking victims straight through Microsoft's own device sign-in flow.

3 min read
Extreme close-up of a server rack's blinking status lights in a darkened data centre, rows of ethernet cables in cool blue and amber tones, shallow depth of fie
Identity & Access

81 Million Login Attempts: A Massive Password Spray Attack Hit Microsoft 365 Users

Criminals hammered Microsoft accounts with automated login attempts for two weeks. At least 78 accounts were broken into, and some victims had multi-factor authentication switched on but not configured to cover the login route the attackers actually used.

3 min read
Photoreal editorial shot of a dimly lit modern office desk at night, a laptop screen glowing with a generic blurred sign-in form, a smartphone beside it showing
Identity & Access

New Phishing Kit 'ARToken' Exposes Full Microsoft 365 Takeover Playbook

Cisco Talos researchers found more than 80 hidden commands inside a phishing service tied to the EvilTokens platform, including tools to steal Microsoft 365 logins, read mailboxes, and quietly hide attacker tracks.

4 min read
Photoreal news-editorial photograph, 16:9 framing, full-frame edge-to-edge composition
AI Security

The Automation Nobody Reviewed: How AI-Built Workflows Are Quietly Leaking Enterprise Data

A developer asked an AI to speed up a document approval process. It worked perfectly and exposed sensitive HR files to hundreds of colleagues. This is happening across businesses right now.

3 min read
Photoreal editorial shot of a modern office desk with an open laptop showing a generic email client interface, soft daylight from a window, muted blue and grey
Vulnerabilities

Microsoft restores missing Copilot buttons in Classic Outlook

A licensing bug wiped the AI assistant's buttons from the desktop email client. Microsoft says a June 29 fix has now landed.

3 min read
Photoreal editorial close-up of a laptop screen showing a generic blurred cloud sign-in prompt, a translucent glowing link being dragged across the screen by a
Identity & Access

Drag, Drop, Hijacked: How 'ConsentFix' Steals Microsoft 365 Sessions in Seconds

A new twist on the ClickFix trick turns Microsoft's own sign-in prompts into a session-theft machine, and a step-by-step guide is now circulating on a Russian crime forum.

4 min read
Identity & Access

BEC Keeps Winning Because It Looks Exactly Like Normal Work

The phishing payload is gone. The pretext is the payload now, and your SEG was never built for that.

3 min read
Identity & Access

Kali365 Phishing Kit Hijacks Microsoft OAuth Tokens to Silently Bypass MFA

The FBI has flagged a device-code phishing campaign powered by Kali365, a toolkit that steals OAuth tokens tied to Microsoft 365 accounts without ever touching a user's password.

3 min read
Threat Intelligence

GRU Operators Drained Microsoft 365 Tokens by Rewriting DNS on 18,000 SOHO Routers

Forest Blizzard shifted from targeted router malware to mass DNS hijacking after a UK advisory in August, intercepting OAuth tokens on Outlook on the web.

3 min read
Identity & Access

FBI flags Kali365, the latest phishing kit pitched at draining Microsoft 365 tenants

The bureau says the subscription-priced service abuses OAuth device-code flows to lift session tokens and walk straight past MFA.

3 min read
© 2026 Threat Vectr