Microsoft has announced that passkeys will become the default authentication method for the Entra ID enterprise identity ...

Starting September 1, 2026, passkeys will become the default authentication experience in Microsoft Entra. Read more about ...

Microsoft has observed a surge in attacks using the ACR Stealer malware to steal browser-stored passwords, authentication ...

Microsoft and Google accelerate passwordless workplace authentication with expanded passkey and FIDO2 security key support.

ACR Stealer is targeting enterprises through ClickFix lures, PowerShell scripts, blockchain services, and malicious image ...

Beginning in September, Microsoft Entra ID will replace SMS and voice authentication with passkeys, signaling that ...

O-UNC-066 uses vishing and a live phishing kit to trick Microsoft 365 users into enrolling attacker-controlled Entra passkeys ...

Why is Microsoft Authenticator stuck in a login loop? Follow these suggestions to fix the issue, and before you start, ensure the app has been updated to the latest version: Clear app cache and ...

From late April 2026 to mid-June 2026, Microsoft Defender Experts observed increased ACR Stealer activity across customer ...

Forg365 targets Microsoft 365 with device code and AitM phishing, then uses stolen tokens for persistent browser sessions and ...

Microsoft 365 passkey phishing is now targeting enterprise employees mid-rollout: criminal group Pink cold-calls workers ...

The FBI warns about Kali365, a phishing scam targeting Microsoft 365 accounts that can bypass multifactor authentication using device code tricks.