Cybercriminals and state-sponsored hackers are increasingly exploiting Microsoft’s legitimate OAuth 2.0 device authorization process to hijack enterprise accounts, bypassing multifactor authentication ...

Kaspersky has outlined quite an interesting phishing campaign that utilizes Microsoft’s infrastructure while making the advice to double-check the domain name redundant. In this new attack, attackers ...