Financially motivated and nation-state threat groups are behind a surge in the use of device code phishing attacks that abuse Microsoft's legitimate OAuth 2.0 device authorization grant flow to trick ...

Multiple Russian nation-state actors are targeting sensitive Microsoft 365 accounts via device code authentication phishing, a new analysis by Volexity has revealed. The firm first observed this ...

With hackers looking for any way they can to gain access to your personal information via every form of phishing scheme, it's critical to take every precaution to protect your data. Multi-factor (MFA) ...

Microsoft warned users on Tuesday that FIDO2 security keys may prompt them to enter a PIN when signing in after installing Windows updates released since the September 2025 preview update. This ...

While online accounts are increasingly protected by passkey technology, it turns out that many banking, e-commerce, social media, website domain name administration, software development platforms, ...

Microsoft is priming Windows 11 for a more passwordless future. The company plans to roll out new passkey-focused features to Windows Insider testers in the coming months, it said in a blog post last ...

Microsoft’s Secure Future Initiative is kicking in for Outlook.com, with higher levels of security that may impact third-party apps. Microsoft’s Secure Future Initiative is kicking in for Outlook.com, ...