Application Security August 31, 2021

Cyberattacks Use Office 365 to Target Supply Chain

2 min read - Malicious actors have a history of trying to compromise users’ Office 365 accounts. By doing so, they can tunnel into a network and use their access to steal sensitive information. But they need not stop there. They can also single…

June 1, 2020

Weekly Security News Roundup: Average Ransomware Demand Grew 14 Times in One Year

3 min read - Researchers revealed that the average ransomware demand grew 14 times over a one-year period from 2018 to 2019. Read on to learn what else happened last week in security news.

May 27, 2020

Office 365 Credentials Targeted by Fake Supreme Court Phishing Attacks

2 min read - Malicious actors leveraged phishing emails designed to look like they originated from the Supreme Court in order to steal victims' Office 365 credentials.

May 20, 2020

New Microsoft Azure AD Sign-In Page Spoofed in Numerous Phishing Campaigns

2 min read - Microsoft discovered numerous phishing campaigns in which malicious actors attempted to spoof its new Azure AD sign-in page.

February 25, 2020

Phishing Schemes Use Google Forms to Steal Office 365 Credentials

2 min read - Phishing campaigns aimed at stealing Microsoft user credentials are using Google Forms to dupe potential victims, security researchers warn.

February 19, 2020

Evolving Turkish Phishing Campaign Targets More Than 80 Companies With Adwind Malware

< 1 min read - Security researchers spotted the latest iteration of an evolving Turkish phishing campaign that's targeting more than 80 companies with Adwind malware.

January 14, 2020

Microsoft Sway Domains Used in Phishing Campaigns to Create Bogus Landing Pages

2 min read - A phishing technique that makes use of Microsoft Sway could attack organizations even if they don't use the tool, security researchers warn.

December 10, 2019

Malicious Office 365 App Leveraged by Phishing Campaign to Access Victims’ Accounts

2 min read - A phishing campaign is using a malicious Microsoft Office 365 app to access victims' accounts without stealing their credentials.

July 29, 2019

Weekly Security News Roundup: US Company Selling Fully Working BlueKeep Exploit

3 min read - Last week in security news, a U.S. company announced that its penetration tool had incorporated a fully working exploit for the BlueKeep vulnerability.

July 23, 2019

Phishers Use Fake Office 365 Alerts to Compromise Admin Accounts

2 min read - Phishers are launching campaigns that leverage fake Office 365 alerts to compromise administrator accounts.