For more than a year, a Russian-speaking threat actor targeted human resource (HR) departments with malware that delivers a new EDR killer named BlackSanta.

Signed malware backed by a stolen EV certificate deployed legitimate RMM tools to gain persistent access inside enterprise ...

Microsoft has identified a phishing campaign using malformed links to legitimate OAuth services to redirect to malware ...

If you work in IT, chances are PowerShell is already part of your daily routine. You might use it to check a service, pull system information, or automate a task that would otherwise take several ...

Windows security updates tend to conjure thoughts of operating system vulnerabilities, including zero-days, being patched or even unexpected failures with serious consequences. This security update, ...

In July 2025, the cybersecurity world was rocked by security researcher Dirk-jan Mollema’s unveiling of a catastrophic vulnerability within Microsoft Entra ID. This was no ordinary flaw; it was a ...

Microsoft has announced plans to improve the security of Entra ID authentication by blocking unauthorized script injection attacks starting a year from now. The update to its Content Security Policy ...

As AI agents proliferate, IT departments need visibility. Microsoft is giving agents the same deference as humans. Microsoft Entra now helps govern every agent's activities. The array of AI-related ...

Microsoft Entra is introducing jailbreak and root detection capabilities into its Authenticator app, in a bid to prevent the possibility of unauthorized account access and ensure the security of ...