Azure Active Directory is a technology platform tracked across 9 threat clusters and 9 intelligence report mentions on ThreatCluster. First observed November 28, 2025; most recent activity July 20, 2026.
A coordinated international effort led by Microsoft and Europol has dismantled Tycoon2FA, a significant phishing-as-a-service platform responsible for bypassing multi-factor authentication and enabling large-scale…
Cybercriminals are increasingly using OAuth client ID spoofing to conduct account enumeration against Microsoft Entra, the identity management service. This method allows attackers to infer username and password…
Ernst & Young LLP (EY) has confirmed a data breach involving unauthorized access to a third-party IT service management platform used for tax-related work. The breach, which occurred between March 28 and April 12, 2026,…
In 2026, the API management market is projected to generate approximately $9.7 billion, making APIs a critical attack surface. A notable incident involved a legacy Stripe API endpoint that was exploited in a…
BeyondTrust has issued a warning regarding a critical remote code execution (RCE) vulnerability in its Remote Support and Privileged Remote Access software. The flaw, tracked as CVE-2026-1731, allows unauthenticated…
Microsoft has announced that starting September 1, 2026, passkeys will become the default authentication method for Entra ID, replacing SMS and voice-based multifactor authentication. This change is aimed at enhancing…
On May 20, 2026, The Oncology Institute, Inc. was notified of unauthorized access to its systems by Kroll, a third-party vendor. The incident, confirmed in an SEC filing on May 22, 2026, involved patient data…
A report from Ontinue reveals that Microsoft Teams' guest access feature allows users to accept invitations from external organizations, which results in the loss of their Defender for Office 365 protections. This…
A new phishing toolkit powered by artificial intelligence has emerged, specifically targeting Microsoft 365 environments. This toolkit automates various stages of phishing campaigns, including the creation of realistic…