M365 is a technology platform tracked across 7 threat clusters and 6 intelligence report mentions on ThreatCluster. First observed November 4, 2025; most recent activity June 13, 2026.
Microsoft 365 (M365) is a cloud-based productivity platform offering email, collaboration, and content services. In cybersecurity, it is a high-value target for identity- and access-focused threats (phishing, MFA bypass attempts, credential theft) and can serve as a vector for ransomware and data exfiltration; recent reports highlight novel phishing techniques and MFA-targeted campaigns against M365.
Chinese hackers infiltrated Microsoft 365 environments, maintaining access for 18 months before detection. The attack exploited vulnerabilities to harvest sensitive data from various organizations. Simultaneously, a new…
Microsoft's newly developed MDASH (Multi-Model Agentic Scanning Harness) identified 16 vulnerabilities in Windows, including four critical remote code execution (RCE) flaws. The vulnerabilities were found in key…
Comhairle nan Eilean Siar, a Scottish council, is still recovering from a ransomware attack that occurred in November 2023. Key systems, including those for housing benefits and council tax, remain unrestored due to the…
A phishing automation platform named Quantum Route Redirect has been identified, utilizing around 1,000 domains to steal Microsoft 365 user credentials. Discovered by KnowBe4 in August, this platform allows less skilled…
The Tycoon 2FA phishing kit, a Phishing-as-a-Service platform, was designed to bypass two-factor authentication protections for Microsoft 365 and Gmail accounts. It utilizes an Adversary-in-the-Middle approach with a…
A significant increase in OAuth device code phishing attacks has been reported, leading to successful takeovers of Microsoft 365 accounts. These attacks grant threat actors full access to accounts, facilitating data…
The Quantum Route Redirect phishing-as-a-service platform is exploiting nearly 1,000 domains to steal Microsoft 365 user credentials. Discovered by KnowBe4 in August 2025, this platform automates phishing attacks,…