Proofpoint research reveals widespread Microsoft 365 account takeover attacks using HTTP client tools like Axios and Node Fetch. With 78% of tenants targeted and 51% of organizations compromised, attackers launched 13 million login attempts since June 2024, successfully breaching 43% of ta...
A widespread cyber attack campaign targeting Microsoft 365 accounts has been detected, utilizing FastHTTP Go library for automated password brute-force attempts against Azure Active Directory. With 65% of attacks originating from Brazil, the campaign achieves a 9.7% success rate in account...
Following a technical failure in the Rockstar 2FA phishing-as-a-service platform, a newer service called FlowerStorm has gained prominence. Both services target Microsoft 365 credentials and share similar designs, with FlowerStorm primarily attacking service industries in North America, UK...
CISA releases BOD 25-01 directive requiring federal agencies to implement strict cloud security measures, starting with Microsoft 365 and expanding to Google Workspace by Q2 FY2025. The mandate includes secure configuration baselines, automated assessment tools, and continuous monitoring, ...
A sophisticated phishing-as-a-service platform, Rockstar 2FA, targets Microsoft 365 users by bypassing multi-factor authentication through adversary-in-the-middle attacks. For $200 per two-week access, it offers customizable phishing pages, automated tools, and support for multiple service...
