Microsoft said Tuesday that it led an industry-wide disruption of a subscription-based scam platform that used an AI chatbot to compromise 12,000 Microsoft accounts over a few-month span.

A new phishing kit abuses a legitimate Microsoft device authorization flow intended for use with printers or smart TVs to steal authentication tokens, register attacker-controlled devices and gain ...

Microsoft quietly announced that it will stop sending SMS codes for authentication and account recovery on personal Microsoft accounts, replacing them with more secure options like passkeys, ...

Suspected Russian threat actors are using OAuth-based phishing attacks to get targets to grant them access to their Microsoft 365 (M365) accounts. “The primary tactics observed involve the attacker ...

Forbes contributors publish independent expert analyses and insights. A hacked Microsoft account is usually fairly straightforward to fix, and there are measures you can take to keep your account safe ...