Cybercriminals are increasingly abusing Microsoft 365 mailbox rules as a stealth persistence mechanism to silently monitor, … Microsoft 365 Mailbox Rules Abused in Email AttacksRead more
microsoft 365 security
Critical Microsoft 365 Email Hijack Attack Exposed
Corporate email remains one of the most targeted attack surfaces in modern cybersecurity—and attackers are increasingly … Critical Microsoft 365 Email Hijack Attack ExposedRead more
Microsoft Word 0-day Vulnerability CVE-2026-21514 Actively Exploited in the Wild
A critical zero-day vulnerability in Microsoft Word, tracked as CVE-2026-21514, has been actively exploited in the … Microsoft Word 0-day Vulnerability CVE-2026-21514 Actively Exploited in the WildRead more
Microsoft 365 Outlook Add-In Exploit: Exfil Out&Look Explained
For years, security teams have relied on Microsoft 365 Unified Audit Logs as a foundational control … Microsoft 365 Outlook Add-In Exploit: Exfil Out&Look ExplainedRead more
When MFA Is Abused: OAuth Device Phishing Explained
Modern phishing attacks no longer need stolen passwords—or even multifactor authentication (MFA) bypasses—to succeed. Instead, attackers … When MFA Is Abused: OAuth Device Phishing ExplainedRead more