Microsoft has issued guidance to uninstall KB5074109 security update or switch to webmail after the patch caused Outlook ...

Beware this highly sophisticated Microsoft 365 attack. Update, March 15, 2025: This story, originally published March 13, has been updated with further technical detail regarding the Microsoft 365 ...

Microsoft and Cloudflare teamed up to take down a notorious phishing service known as "RaccoonO365," the companies said this week. In a blog post, Microsoft said its Digital Crimes Unit used a court ...

KnowBe4 today announced a strategic integration with Microsoft to strengthen email security. As the first initiative in Microsoft's ICES (Integrated Cloud Email Security) vendor ecosystem, this ...

Microsoft says its Defender for Office 365 cloud-based email security suite will now automatically detect and block email bombing attacks. Defender for Office 365 (formerly known as Office 365 ...

Update, August 10, 2025: This story, originally published on August 7, has been updated with additional information following a demonstration of the shared service principal exploit at the Black Hat ...

An ongoing phishing campaign abuses a little‑known feature in Microsoft 365 called "Direct Send" to evade detection by email security and steal credentials. Direct Send is a Microsoft 365 feature that ...