Microsoft warns of fake passkey and IT support attacks targeting Microsoft 365 accounts to steal authentication tokens and access corporate cloud data.

Microsoft says threat actors linked to ShinyHunters, Helix, and other extortion gangs are using passkey and single sign-on-themed social engineering attacks to compromise corporate Microsoft accounts ...

Attackers use social engineering, calling personal phones, to steal Microsoft 365 access and pull SharePoint and OneDrive data.

Cohere announced on September 25, 2026, that Compass, its retrieval platform for developers building AI applications on ...

A practical guide for DX personnel, internal IT staff, and accounting staff at small and medium-sized enterprises (as of September 2026)Introduction“The Excel macro I received from a business partner ...

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Zero trust AI agents demand a different kind of security ...

Explore the latest news, real-world incidents, expert analysis, and trends in CISA — only on The Hacker News, the leading ...

Microsoft is warning customers of two recent social engineering campaigns aimed at compromising Microsoft accounts to target cloud-based assets and directing fraudulent business transactions over ...

The biggest mistake asset managers are making with AI is not moving too slowly on models — it is pouring capital into data infrastructure that ...

Microsoft confirmed active exploitation of SharePoint flaw CVE-2026-65660, prompting CISA to add the RCE bug to its KEV list.

A recently patched SharePoint flaw could give attackers a way to run code on vulnerable servers, and new research shows how it can be combined with authentication weaknesses to launch an attack ...

Microsoft Graph Data Connect can now expose additional metadata for read-locked and archived SharePoint sites, giving governance and analytics teams more context about inactive content.