Threat actors are abusing misconfigured MX records and weak DMARC/SPF policies to make phishing emails look internal, ...

Microsoft said that Office 365 tenants with weak configurations and who don't have strict anti-spoofing protection enabled ...

Microsoft had announced a spam protection measure for Exchange Online. The external recipient limit will not be implemented ...

Microsoft’s investigation into RedVDS services and infrastructure uncovered a global network of disparate cybercriminals ...

As organizations increasingly rely on cloud-based services like Microsoft 365 Exchange for daily communication, a common and potentially dangerous assumption has emerged: that storing data in the ...

Microsoft to remove VPN from M365 users. Update, Feb. 4, 2025: This story, originally published Feb. 3, now includes a statement from Microsoft about the removal of ...

Microsoft says its Defender for Office 365 cloud-based email security suite will now automatically detect and block email bombing attacks. Defender for Office 365 (formerly known as Office 365 ...

Imagine clicking a genuine-looking Microsoft email with a familiar logo, layout, and URL, only to end up losing your account credentials. Phishing emails are getting smarter as threat actors are now ...

Millions of near-undetectable emails impersonating blue chip companies were spreading every day through the first half of 2024, thanks to some permissive features of Microsoft 365 and Proofpoint's ...