Microsoft patches two critical Active Directory flaws
Semperis researchers have identified two critical Active Directory vulnerabilities, ResetNightmare and KerberLoss. Microsoft has issued patches for both…
Microsoft makes passkeys default for Entra ID logins
Microsoft will make passkeys the default authentication method in Entra ID, starting with users enabled for SMS or…
Microsoft 365 EvilToken campaign hits hundreds daily
AppOmni’s threat hunting team has identified both attempted and successful EvilToken device code phishing activity across Microsoft 365…
Infostealers increasingly target enterprise SSO access
Flare said infostealer malware is exposing enterprise identity credentials at a rising rate, with late-2025 data showing 16%…