In early 2026, the Iranian APT group MuddyWater launched cyberattacks against U.S. banking, a major airport, and Israeli operations of a U.S.-based software company. The attacks intensified in March, coinciding with…
A misconfigured server in Budapest has exposed a phishing operation targeting Microsoft 365 users. The server was running a Python HTTP server with directory listing enabled, allowing access to phishing configurations…
A report from Ontinue reveals that Microsoft Teams' guest access feature allows users to accept invitations from external organizations, which results in the loss of their Defender for Office 365 protections. This…
Microsoft has announced that starting in March 2026, it will block Exchange Web Services (EWS) access for users without the appropriate license rights. Affected users include those with only Microsoft 365 or Office 365…