Seit Mai 2026 täuschen Angreifer Beschäftigte mit gefälschten IT-Anfragen und stehlen Daten aus Cloud-Diensten.

Welcome to the Continuous Cloud Optimization Power BI Dashboard GitHub Project. In this repository you will find all the guidance and files needed to deploy the Dashboard in your environment to take ...

A new phishing kit abuses a legitimate Microsoft device authorization flow intended for use with printers or smart TVs to steal authentication tokens, register attacker-controlled devices and gain ...

Attackers are calling or texting employees on their personal phones, posing as internal IT staff, in a social engineering campaign that tricks them into handing over access to corporate cloud accounts ...

The activity, observed since May 2026, relies heavily on social engineering. Victims may receive a phone call, SMS message, or Microsoft Teams message from someone impersonating the organization’s IT ...

Microsoft Security Research is tracking active cloud-based intrusions spanning multiple accounts in which unusual sign-ins were followed by threat actor-added authentication methods, high-volume ...

A newly discovered Python implant called “TWINLOOT” abuses multiple trusted Microsoft services to hide its command-and-control (C2) communications from security tools, Ontinue reported Tuesday. The ...

Ontinue’s Cyber Defense Center has identified a Python-based implant that keeps most of its command traffic inside Microsoft services, making malicious activity resemble normal Microsoft 365 use.

A Python-based malware framework is taking the concept of living off the land (LOTL) to a whole new level by operating its entire command-and-control (C2) from inside Microsoft Azure and 365 services, ...

Cybersecurity researchers have disclosed details of a previously undocumented Python implant framework dubbed TWINLOOT. "TWINLOOT is a modular, PyArmor-hardened Python implant designed to operate its ...