Passkey-themed social engineering is being used to compromise identities and enable broader cloud attacks. Learn how threat actors establish MFA persistence, abuse Microsoft Graph for reconnaissance, ...

Microsoft 365 phishing MFA bypass platform BigBear 2.0 compromised 258 organizations across 40+ countries by using custom JavaScript to disable FIDO2 hardware key authentication before stealing ...

Microsoft says threat actors linked to ShinyHunters, Helix, and other extortion gangs are using passkey and single ...

Microsoft fixed 974 CVEs, including two vulnerabilities exploited as zero-days (CVE-2026-85880 and CVE-2026-81963) ...

Rapuncel infostealer campaign stole browser passwords and crypto wallet data from Windows users after a Microsoft-signed kernel driver killed 145 antivirus and EDR tools -- the same driver that scored ...

Microsoft Patch Tuesday September 2026 set a record with 966 vulnerabilities patched, but security analysts say an ...

Dispositivos com protocolo FIDO2 eliminam o risco de phishing, mas o custo e a complexidade fazem sentido apenas para perfis ...

Most people treat a casino login the way they treat a game login: a quick password, a saved card, done. That is the wrong ...

Which MFA fits your organization? Our use-case guide maps 8 multi-factor authentication picks to SMBs, M365 shops, legacy ...

On June 2, 2026, the US President issued Executive Order No. 14,409, “Promoting Advanced Artificial Intelligence and Security.” The provisions of ...

Research traces cloud compromises to fake passkey setup requests that trick users into authorizing attacker access and ...