A new variation of the ClickFix attack dubbed 'ConsentFix' abuses the Azure CLI OAuth app to hijack Microsoft accounts without the need for a password or to bypass multi-factor authentication (MFA) ...

Microsoft issued guidance on securing Azure accounts that may be impacted by a recently addressed Cosmos DB critical vulnerability, giving attackers full admin rights to users' data without ...

Microsoft announced a couple of Azure Active Directory security enhancements this week. Microsoft is previewing the ability to allow IT pros to remove inactive user accounts for organizations that use ...

To thwart password and phishing attacks, Microsoft is rolling out security defaults to a massive number of Azure Active Directory (AD) users. Microsoft began rolling out security defaults to customers ...

With SpaceX’s help, Microsoft is taking the next step toward merging cloud computing with available-anywhere satellite connectivity. Today Microsoft announced the start of a private preview for Azure ...

The attack targeted people with senior-level titles through a phishing campaign enabled by other compromised accounts within the organizations. Security researchers warn that an ongoing cloud account ...

Cybersecurity firm Proofpoint has observed a new malicious campaign targeting dozens of Microsoft Azure environments. Threat actors have targeted hundreds of individuals with multiple operational and ...

This post explains how to fix Microsoft Account error Your account has been locked. Several users have reported that Microsoft has locked their accounts without any ...