Over the past three months, our threat analysts have noticed a significant spike in attackers abusing Microsoft 365’s Direct Send feature—a tool intended for devices like printers or scanners to send ...

A threat actor has been abusing link wrapping services from reputed technology companies to mask malicious links leading to ...

Threat actors abuse Proofpoint and Intermedia link wrapping to deliver phishing emails and steal Microsoft 365 credentials.

The ongoing campaign, first detected in early 2025, is designed to use the OAuth applications as a gateway to obtain ...

Microsoft 365 Copilot, the AI tool built into Microsoft Office workplace applications including Word, Excel, Outlook, PowerPoint, and Teams, harbored a critical security flaw that, according to ...

A new SharePoint exploit bypassed Microsoft’s patch, exposing over 8,000 systems and revealing deep flaws in on-premise ...

Microsoft has issued a stark warning about a recent cyberattack targeting critical infrastructure, including the U.S.

Zero-day exploits are the ghosts in the machine, silent, invisible, and devastating when they finally make themselves known.

A global attack has breached Microsoft server software used by thousands of government agencies and businesses, likely by a ...

The term "zero-day" attack refers to when a previously unknown vulnerability is targeted. Tens of thousands of servers are ...