Microsoft 365 users fall victim to one-in-a-million password spray attack

The attack exploited previously exposed credentials and flaws in enterprises’ multi-factor authentication configurations.
SecurityWeek

Massive Password Spray Campaign Targeting Azure CLI

Threat actors have made over 81 million login attempts in a massive password spray campaign targeting Azure CLI.

ConsentFix and ClickFix: How Microsoft 365 Accounts are Hijacked in 3 Seconds

ConsentFix and ClickFix attacks steal Microsoft 365 tokens in seconds using fake prompts and OAuth flows. Learn how these MFA ...
SecurityWeek

FortiBleed Campaign Linked to INC, Lynx Ransomware Attacks

FortiBleed campaign targeting FortiGate firewalls is tied to INC and Lynx ransomware, with over 110 million stolen credentials linked to attacks.

CISA: Windows BlueHammer flaw now exploited by ransomware gangs

CISA confirmed on Monday that ransomware gangs are now exploiting a Microsoft Defender privilege escalation vulnerability, dubbed BlueHammer, that has previously been abused in zero-day attacks.