Microsoft 365 in the Media

Microsoft Weekly: New Surface Laptop, Local AI, and Microsoft 365 Family storage cuts

Catch up with this week's Microsoft stories in our latest recap. New Surface hardware, Microsoft 365 storage controversy, and more. <a hre

Microsoft is slashing free OneDrive storage for Microsoft 365 subscribers

Microsoft 365 subscribers are set to lose terabytes of free online storage space. Microsoft has quietly announced a reduction in the amount of OneDrive storage included with various subscriptions, and users are not happy about it. While subscribers to Microsoft 365 Family or Premium plans were eligi

Microsoft 365 is making a big cut to your OneDrive storage perk

Microsoft 365's 6TB OneDrive storage perk is shrinking to just 2TB.

Microsoft 365 subscribers set to lose up to 4TB of OneDrive storage

What Microsoft giveth, Microsoft taketh away, again and again

Microsoft 365 storage shrinkflation gives families less room in the cloud

<img alt="Microsoft 365 storage shrinkflation gives families less room in the cloud" class="attachment-large size-large wp-post-image" height="471" src="https://nerds.xyz/wp-content/uploa

Microsoft 365 Consumer Subscriptions Are Transitioning to Shared AI Benefits and Cloud Storage

Microsoft is making AI features available for all members of a Microsoft 365 Family or Microsoft 365 Premium plan. However, these plans will also transition to a shared cloud storage pool. The post <a href="https://www.thurrott.com/a-i/342658/microsoft-365-consumer-subscriptions-are-transi

Sharing Microsoft 365 with 3+ people? Your OneDrive is shrinking

Microsoft 365 Expands AI Sharing Benefit, But Trims Cloud Storage

OneDrive storage benefits for Microsoft 365 Family and Premium plans will shrink from 1TB per person for up to five extra users to 2TB shared among everyone.

Microsoft 365 Family plan slashes cloud storage from 6TB to 2TB

'Bad decision, they will find many customers cancel the auto renewal now': customers suggest a rebellion could be underway.

Microsoft 365 slashes storage capacity for shared accounts amid industry-wide shortages

Microsoft 365 sla

Microsoft 365 slashes storage capacity for shared accounts amid industry-wide shortages

This effectively increases the costs for large users, although it may benefit those who have family members that don't take up much cloud storage space.

Microsoft cuts 4TB from Microsoft 365 Family, sparking backlash and cancelled subscriptions

Microsoft 365 Family now includes 4TB less OneDrive storage, leaving subscribers with less value despite paying the same price.

I'm seriously considering canceling my Microsoft 365 Family subscription

Microsoft 365 Family's 66.7% OneDrive storage cut in favor of shared Copilot benefits has destroyed its value

Microsoft 365 Family subscribers will finally be able to share AI benefits

Microsoft bundled its AI-powered Office features into Microsoft 365 Personal and Family subscriptions last year, but it only allowed the primary account holder to access the AI benefits. Now, Microsoft is about to let Microsoft 365 Family and Premium subscribers share Copilot and AI usage features,

Microsoft 365 Family and Premium subscribers will soon be able to share Copilot AI benefits

Microsoft is changing its Microsoft 365 Family and Premium tiers by extending Copilot AI capabilities to all linked family members. <a href

Got a Microsoft 365 subscription? Your storage is about to shrink

Today, shared Microsoft 365 plans include 1 TB of OneDrive cloud storage for every family member. Microsoft is about to shrink that allotment dramatically.

The Microsoft 365 Targeted Release channel for Office apps is being retired

Microsoft 365 admins have only months to prepare for a major change to how their organizations receive new Office ap

Dutch tax office drops Microsoft 365 cloud for own servers and open source

The Dutch tax and customs administration has dropped its move to Microsoft 365 in the cloud. Its office software will instead run on servers it controls, together wit

Dutch tax authority will ditch Microsoft 365 in favor of on-premises and open source

It is attempting to reduce its reliance on Microsoft, but it won't cut it off entirely. It'll still rely on tools like Outlook. <

PSA: Apple Mail on Mac May Stop Syncing Microsoft 365 Accounts Today

Microsoft today began disabling Exchange Web Services (EWS) by default in Exchange Online, which will cut off the protocol that Apple's Mail and Calendar apps on Mac still rely on to sync Microsoft 365 work accounts. <img alt="" class="aligncenter size-full wp-image-900439" height="12

Proton Easy Switch lets businesses move from Microsoft 365 in just days, rather than months

After offering Easy Switch for Google Workspace, Proton is now helping Microsoft 365 admins move over to Proton Workspace.

Hackers Broke Into Microsoft 365 Through Forgotten Accounts Nobody Was Watching

Hackers have breached Microsoft 365 environments by targeting accounts that were still active but unmonitored. An old password and missing sign-in protections gave intruders a route into email, files, and cloud applications. The campaign focused heavily on organisations in Chile, including a larg

Hackers Target 5,700 Microsoft 365 Accounts Using Forgotten Service Accounts With No MFA

Threat actors have targeted more than 5,700 Microsoft 365 accounts across 28 tenants in a password-spraying campaign that successfully breached seven forgotten service accounts lacking MFA. The activity, tracked by Proofpoint as UNK_CondorFiltration, focused heavily on Chilean retail and financia

Microsoft Tells Nonprofits Deleted Microsoft 365 Data Is Unrecoverable

Microsoft has told nonprofits that accidentally deleted Microsoft 365 data cannot be restored, citing completed purge cycles tied to retention policies, expired licenses, and automa

France's OVHcloud Microsoft 365 alternative set for November

France's OVHcloud Microsoft 365 alternative set for November <fo

Microsoft is retiring three Microsoft 365 companion apps in December

Microsoft has announced that three companion apps for Microsoft 365 are to be retired. In mid-December, the Calendar, File and People apps will not only no longer be supported, they will no longer work. The apps were previously described by the company as “a suite of taskbar-integrated apps designed

Microsoft to retire Microsoft 365 Companion apps in December

Microsoft will retire the Calendar, People, and Files Microsoft 365 companion apps on December 16 and has asked admins to remove them from managed devices. [...]

Schleswig-Holstein chancellery migrates to Linux after ditching Microsoft 365

Schleswig-Holstein chancellery migrates to Linux after ditching Microsoft 365 <font color

Why Companies Keep Ditching Microsoft 365 for Google Workspace Despite Zero Savings

Gartner analyst Domenico Scriva says many companies switch from Microsoft 365 to Google Workspace out of frustration rather than financial gain. New data shows the move often costs

Businesses are dropping Microsoft 365 in favor of Google, but if the ROI is no different, why are people switching?

Switching software vendors only makes sense in a few, very limited scenarios, and even then, things could all be about to change.

GhostCode Phishing Kit Bypasses Microsoft 365 MFA to Hijack Accounts in 78 Seconds

GhostCode is a newly identified phishing kit that turns a normal Microsoft 365 sign-in into an account takeover. It does not need to steal a password. Instead, it persuades people to approve a login that gives criminals access to their work account. The campaign began with ordinary-looking messag

Microsoft 365 Hit by New Outage as Users Report Widespread 502 and 503 Errors

Microsoft has confirmed a fresh service degradation affecting its Microsoft 365 suite, with users worldwide reporting an inability to access core applications since the evening of September 16, 2026. The incident, tracked internally as MO1472904, began at 7:17 PM GMT+5:30 and has been classified

Microsoft Investigating Microsoft 365 Copilot Access Issues Under Incident CP1470554

Microsoft is investigating a Microsoft 365 Copilot disruption in which users may be unable to open the assistant or encounter errors while using it. The company is tracking the event as CP1470554 and pointed administrators to the Service Health Dashboard in the Microsoft 365 admin center. In a st

Attackers call employees’ personal phones to break into Microsoft 365 accounts

Attackers are calling or texting employees on their personal phones, posing as internal IT staff, in a social engineering campaign that tricks them into handing over access to corporate cloud accounts. Once inside, they pull files and email from Microsoft 365 apps, SharePoint, OneDrive, and inbox

Hackers Use Passkey-Themed Phishing to Hijack Microsoft 365 Accounts and Steal Cloud Data

Hackers are using passkey-themed phishing to take control of Microsoft 365 accounts and collect cloud data. It can defeat MFA protections. The campaign starts with calls and texts to employees. Attackers pose as IT support, claim a passkey, MFA, or single sign-on setting needs attention, and dire

Hackers Pose as IT Support to Hijack Microsoft 365 Accounts With Fake Passkey Alerts

Threat actors are impersonating corporate IT helpdesk staff in an active social-engineering campaign that hijacks Microsoft 365 identities, establishes MFA persistence, and systematically collects data from SharePoint, OneDrive, and Exchange Online. Microsoft Security Research said it has observe

BigBear 2.0 Bypasses Microsoft 365 MFA at 258 Organizations

BigBear 2.0 bypassed Microsoft 365 MFA at 258 organizations by stealing session cookies. Learn how the phishing service works and how to respond. The post BigBear 2.0 Bypasses Microsoft 365 M

Microsoft 365 users hit by two major threat campaigns - fake IT calls and phishing emails target users across the world

BigBear 2.0 and PREY-0058 are wreaking havoc across businesses as they scam employees into handing over login credentials and MFA codes.

BigBear phishing crew nets thousands of Microsoft 365 credentials

Researchers got inside the crooks' admin panel and found 5,137 stolen records tied to 461 organizations

IT help-desk vishing tricks executives into handing over Microsoft 365 access

IT help-desk vishing calls, stolen session tokens, and sign-ins routed through residential proxies are behind a wave of data theft and extortion against Microsoft 365 and other SaaS accounts, according to Arctic Wolf. The company is tracking the activity under the name PREY-0058 and notes it shar

BigBear 2.0 Evilginx2 Phishing Campaign Bypasses Microsoft 365 MFA With Session Cookie Theft

BigBear 2.0 is a phishing operation designed to steal proof that a user has already passed multi-factor authentication. It targets Microsoft 365 accounts through convincing sign-in links, then takes over the logged-in browser session rather than attempting to break the authentication factor. The

Hackers Steal Microsoft 365 Sessions to Hijack Accounts Even After MFA

Cybercriminals are using a rebranded Evilginx2 phishing-as-a-service platform dubbed BigBear 2.0 to intercept authenticated Microsoft 365 sessions, allowing them to take over accounts even after victims complete multi-factor authentication (MFA). CloudSEK’s TRIAD team uncovered the operation afte

Switzerland Builds Open-Source Workplace Platform to Operate Alongside Microsoft 365

Switzerland’s Federal Chancellery is advancing a sovereign digital workplace initiative following a feasibility study that demonstrated how open-source collaboration and office software can effectively support essential workflows within the federal administration. This initiative, announced to th

Euromonitor launches Passport agent in Microsoft 365 Copilot

Users can now query Euromonitor's market data inside Microsoft 365 Copilot, with every answer citing sources to reduce AI errors and risk.

As France and China ditch Microsoft, Switzerland joins in by slowly shifting from Microsoft 365

It has become a common trend over the past year.

BigBear Microsoft 365 phishing service bypassed MFA at 258 organizations

Bill Toulas reports: A phishing-as-a-service framework called BigBear 2.0 has been used to bypass multi-factor authentication at 258 organizations and steal more than 5,000 Microsoft 365 credentials. Researchers at cybersecurity company CloudSEK gained administrator access to the control panel and f

Fake IT Calls Target Executives in Microsoft 365 Data Theft and Extortion Attacks

Threat hunters have disclosed details of a widespread data theft and extortion threat cluster that's targeting Microsoft 365 and other software-as-a-service (SaaS) offerings through information technology (IT) help desk vishing, adversary-in-the-middle (AitM) token theft, and residential-proxy sign-

BigBear Microsoft 365 phishing service bypassed MFA at 258 organizations

A phishing-as-a-service framework called BigBear 2.0 has been used to bypass multi-factor authentication at 258 organizations and steal more than 5,000 Microsoft 365 credentials. [...]

Switzerland Moves Away From Microsoft 365 to Open-Source Alternatives

Switzerland’s federal administration is preparing to test a sovereign, open-source digital workplace that could reduce its long-term dependence on Microsoft 365 for sensitive government operations. The Swiss Federal Council was informed of the results of a feasibility study on September 2, 2026,

Switzerland begins testing alternatives to Microsoft 365 to protect its "most sensitive data" and strengthen digital sovereignty

Switzerland is trialing alternatives to Microsoft 365, shifting 3,000 government workstations to test other apps amid sovereignty and data protection concerns.

Microsoft 365 Phishing Technique Uses Empty Envelope Sender to Evade Direct Send Blocking

Microsoft 365 users are facing a phishing technique built on a small change: attackers leave the SMTP envelope sender blank. The omission can let an unauthenticated message pass a Direct Send safeguard while showing employees an address that appears to belong to their own organization. The approa

Microsoft 365 Direct Send Bypass Lets Attackers Spoof Internal Users Without Credentials

A Microsoft 365 email security-control bypass that lets attackers submit unauthenticated messages posing as internal users by leaving one SMTP field blank. The technique targets Exchange Online’s RejectDirectSend setting and does not represent a vulnerability in Microsoft software or in ReliaQues

Hackers Target US and EU Firms With Microsoft 365 Session Hijacking and RMM Abuse

A wave of cyberattacks across the US and Europe in August exploited the trust businesses place in everyday tools, turning Microsoft 365 logins, remote-management software, and routine business documents into entry points for attackers. Security researchers tracked campaigns that combined account

Euromonitor Introduces Passport Intelligence Through Microsoft 365 Copilot

Euromonitor connects Passport to Microsoft 365 Copilot so clients can query trusted market insights through AI MCP integration connects Copilot to Passport market knowledge, helping organisations bring trusted market intelligence into their workflow Organisations get clear, sourced answers from Euro

Open-source secrets scanning tool Sift hunts credentials in Microsoft 365, Slack, and Jira

Sift is a free, open-source command line tool that searches for passwords, API keys, and other sensitive data across the places a company keeps its work: local disks, Windows file shares, an entire Active Directory domain, SharePoint, OneDrive, Teams channel files, Slack messages, and Jira and Co

Microsoft 365 outage drags on, but things are improving

Microsoft 365 and Outlook are still seeing service degradations on Tuesday, the company's status page indicates.

Microsoft 365 outages run into second day

"Queues are draining," but problems persist for at least 18 hours.

Microsoft 365 outage enters second day as search disruptions persist

<p class

Hackers Bypass Microsoft 365 MFA and Hijack Finance Mailbox to Steal Payments

A single phishing email was enough to give attackers access to a finance employee’s Microsoft 365 account and redirect vendor payments. The incident shows how criminals can bypass multi-factor authentication without installing malware or breaking into a company device. The attackers used a target

Hackers Create Hidden Microsoft 365 Inbox Rules to Conceal Vendor Payment Fraud

Threat actors are increasingly abusing Microsoft 365 identity sessions rather than deploying malware, as shown in a cloud-only business email compromise (BEC). The attackers used an adversary-in-the-middle (AiTM) phishing kit to capture an authenticated Microsoft 365 session token, bypass multi-f

Hackers Let Microsoft 365 Users Complete MFA, Then Steal Logged-In Sessions

A sophisticated Phishing-as-a-Service (PhaaS) platform marketed as Mirage2FA is enabling threat actors to bypass multi-factor authentication (MFA) by allowing Microsoft 365 users to complete their regular login process before covertly stealing the authenticated session. Threat researchers at ANY.

Microsoft 365 Service Degradation Disrupts Users Across South America

Microsoft is responding to a regional outage that may leave users in South America unable to use multiple Microsoft 365 services. The company is tracking the disruption as issue MO1457636, a service degradation of the Microsoft 365 suite that began at 2:34 p.m. UTC on August 19, 2026 (8:04 p.m. I

Microsoft 365 Search Outage Disrupts SharePoint, OneDrive, and Outlook Users Worldwide

Microsoft is actively managing a service disruption that has left a subset of enterprise users unable to search for content across SharePoint Online, OneDrive, Outlook on the web, and Outlook desktop. The incident, tracked in administrative portals under reference MO1456424, was confirmed after u

New malware turns Microsoft 365 and Azure into its control center

<p class

Microsoft confirms outage affecting search in Microsoft 365 apps

Microsoft says some users are experiencing issues searching in Microsoft 365 apps, including Outlook on the web, Outlook desktop, SharePoint Online, and OneDrive. [...]

Microsoft unifies copilot and Microsoft 365 copilot into one app: Here’s what’s changing

Microsoft is rolling out a unified Copilot app that brings personal and productivity experiences together, while retiring features including Group Chat, Podcasts and Deep Search for consumers.

Microsoft is Unifying its Consumer Copilot App and Microsoft 365 Copilot into a Single App

Microsoft is preparing to unify its separate Consumer Copilot App and Microsoft 365 Copilot app into a single client that supports both personal and work accounts. The post <a href="https://www.thurrott.com/a-i/340382/microsoft-is-unifying-its-consumer-copilot-app-and-microsoft-365-copilot

Microsoft begins unified Copilot app rollout: Reveals major plan to merge Copilot and Microsoft 365 Copilot across all platforms, along with updated branding

We knew it was coming, and now it's official: Microsoft is beginning to rollout a new Copilot app that merges Copilot and Microsoft 365 Copilot under one experience.

Windows 10 users are getting locked out of new Microsoft 365 features in a bid to push for Windows 11

Will it convince people to upgrade?

S&P Global data integrated into Microsoft 365 Copilot

Microsoft has struck a deal to integrate S&P Global AI-ready data, insights and analytics into its 365 Copilot workflows and agentic experiences.

ConnectSecure helps MSPs automate Microsoft 365 security remediation

ConnectSecure has announced that Microsoft 365 Auto Remediation and AI-powered Training Assessments are now live on the ConnectSecure platform. The capabilities help managed service providers (MSPs) address supported M365 security findings, create and measure assessments, support client training

Payroll Pirates AiTM Phishing Hijacks Microsoft 365 Sessions and Targets Payroll Emails

Payroll Pirates are using phishing emails to seize Microsoft 365 sessions and search payroll-related mailboxes. The campaign turns a voicemail alert into a route for financial fraud, even when multi-factor authentication is enabled. The messages imitate an automated call notification and invite r

Microsoft 365 AitM Phishing Hijacks Accounts to Collect Payroll and Finance Emails

Cybersecurity researchers have called attention to an active "widespread email-driven phishing campaign" that employs adversary-in-the-middle (AitM) techniques to take control of Microsoft 365 accounts with an aim to identify key personnel involved in financial workflows and gather related email. "

UNC6671 Automates Microsoft 365 Data Theft After Hijacking Employee Sessions

UNC6671 is carrying out data theft campaigns that begin with a phone call. The group poses as an IT helpdesk, claiming an urgent security migration is necessary. A convincing call and a fake sign-in page can turn an ordinary session into an entry point. The calls create urgency before employees c

Greatness PhaaS Bypasses Email Security and MFA to Hijack Microsoft 365 Accounts

Greatness has emerged as a phishing-as-a-service platform designed to steal Microsoft 365 access at a time when many organizations assume multi-factor authentication will stop account takeovers. Rather than simply collecting a password, it can capture a valid sign-in token that lets an attacker e

Stolen Greatness Tokens Provide Microsoft 365 Access More Than Two Weeks After Phishing

Stolen Greatness authentication tokens are providing sustained, MFA‑approved access to victim Microsoft 365 tenants for more than two weeks after the initial phish, underscoring that token replay – not password theft – is driving the persistence in this AiTM PhaaS ecosystem. Originally documented

Cloudflare OS is an open-source AI alternative to Microsoft 365 and Google Workspace

<img alt="Cloudflare OS is an open-source AI alternative to Microsoft 365 and Google Workspace" class="attachment-large size-large wp-post-image" height="471" src="https://nerds.xyz/wp-content/uploads/2026/07/Cloudflar

Microsoft suddenly pulls new Microsoft 365 Copilot feature after rollout with no explanation

Microsoft unexpectedly pulled a newly released Copilot admin feature after rollout, leaving customers waiting to see what happens ne

Phishing service spoofs RingCentral to steal Microsoft 365 accounts

The Greatness phishing-as-a-service (PhaaS) platform has expanded from credential phishing to adversary-in-the-middle attacks and device-code phishing targeting Microsoft 365 accounts. [...]

Microsoft warns Russian hackers are hijacking hotel Wi-Fi to steal Microsoft 365 accounts

<img height="560" src="https://www.techspot.com/images2/news/ts3_thumbs/2026/08/2026-08-04-ts3_thumbs-28d.jpg" style="padding: 15px 0;" title="Microsoft warns Russian hackers are

Russian hackers abuse hotel Wi-Fi networks to steal Microsoft 365 credentials and deploy malware

Midnight Blizzard, the Russian threat actor tied to the country’s foreign intelligence service, has spent months targeting users of public Wi-Fi networks at places like hotels and conference centers, according to new findings from Microsoft Threat Intelligence. Overview of the CaptiveCrunch

ChocoShell Steals Microsoft 365 Tokens and Browser Sessions From Travelers

ChocoShell is a PowerShell-based infostealer used in Microsoft’s newly disclosed “CaptiveCrunch” campaign to steal Microsoft 365 tokens, browser sessions, and Wi‑Fi credentials from travelers connecting to compromised hospitality networks worldwide. The operation, dubbed “CaptiveCrunch,” poisons

CMA investigates Microsoft for hiding Classic Microsoft 365 plans after 2025 AI price hikes

The CMA says Microsoft offered a limited-time Classic plan but didn't publicize it well enough. If found in breach, the CMA can fine M

Did Microsoft mislead Personal and Family customers? UK regulator probes higher Microsoft 365 subscription prices

Britain's antitrust regulator is investigating whether Microsoft misled Microsoft 365 subscribers over Copilot pricing, adding to growing global scrutiny of the company's software and AI practices.

Dismantled Kratos Phishing Kits Acting as Blueprint for Others to Attack Microsoft 365 Users

Kratos is a phishing service built to steal Microsoft 365 credentials at scale. It evolved from the Sneaky2FA kit and gave affiliates ready-made login pages, hosting options, and evasion features that made fraudulent sign-ins harder to detect. The operation relied on phishing emails that led targ

Dismantled Kratos Phishing Kit Becomes Blueprint for Attacks on Microsoft 365 Users

The takedown of the Kratos phishing-as-a-service (PhaaS) platform in July 2026 has done little to slow the broader threat landscape. As security researchers warn that its leaked techniques and infrastructure patterns are already being repurposed in ongoing campaigns targeting Microsoft 365 enviro

Microsoft 365 profile cards are getting a "major change", some IT admins should take action

A major Microsoft 365 change is coming soon, and organizations that ignore it could end up exposing more information than they intend

Microsoft blames massive Microsoft 365 outage on maintenance bug

Microsoft says a bug in its automated network maintenance request system caused Thursday's massive outage by mistakenly removing IP routes from more devices than intended, disrupting Azure and Microsoft 365 services. [...]

Hotel Wi-Fi DNS Poisoning Attacks Hijack Microsoft 365 Accounts Without Phishing

Adversaries are silently hijacking Microsoft 365 accounts by compromising hotel and conference-center Wi-Fi gateways and poisoning DNS no phishing emails, malicious attachments, or endpoint malware required. ReliaQuest assesses that the tradecraft closely mirrors prior APT28-linked router campaig

Microsoft 365 Services Outage Impacted Teams, Copilot, Purview and Other Services

A Microsoft 365 outage disrupted access to several widely used enterprise services, including Microsoft Teams, SharePoint Online, OneDrive, Copilot Chat, Microsoft Purview, and Power BI. The incident primarily affected customers whose Microsoft 365 traffic was routed through the North America reg

Microsoft 365 servers down as outage may have hit as Teams, Outlook, SharePoint, and more

Microsoft has confirmed that various M365 services have slowed down as they have been hit by an outage. The company is invest

Microsoft 365 outage affects Teams, SharePoint and other services

Microsoft Teams and several Microsoft 365 services are experiencing an ongoing outage, with users reporting problems accessing Teams, SharePoint, Excel and the Microsoft 365 Admin Center. [...]

Hackers Abuse Compromised Outlook Accounts to Steal MFA-Protected Microsoft 365 Sessions

Attackers are quietly turning trusted Microsoft Outlook mailboxes into launchpads for stealing multi factor authenticated Microsoft 365 sessions, even when users think they are protected. Adversary in the middle phishing has evolved into a reliable tool for hijacking live cloud sessions that orga

HollowGraph malware uses Microsoft 365 calendar for command and control

HollowGraph, believed to be part of the Cavern command-and-control framework, targets organizations in Israel for espionage purposes.

Hackers Are Turning Microsoft 365 Calendar Invites Into Secret Malware Command Channels

A stealthy new malware strain called HOLLOWGRAPH that hijacks Microsoft 365 calendars to secretly communicate with hackers, disguising malicious commands as ordinary calendar invites. HOLLOWGRAPH is a .NET-compiled malware component that abuses the Microsoft Graph API through a compromised Micros

HOLLOWGRAPH malware turns Microsoft 365 calendars into an espionage channel

Microsoft 365 calendars have become a hiding place for espionage malware, with commands and stolen files stashed inside appointments dated to the year 2050, researchers from Group-IB discovered. Targeted campaign tied to Iranian espionage activity The malware, which Group-IB calls HOLLOWGRAPH, is

Kratos PhaaS Attacking Microsoft 365 Users Across the US, Europe to Steal Credentials

Kratos is a phishing-as-a-service operation built to steal Microsoft 365 credentials. It is targeting organizations across the United States, Europe, and other regions by using believable document, invoice, and file-sharing lures that lead victims to fake login pages. The campaign puts a wide ran

Kratos PhaaS Targets Microsoft 365 Users With SharePoint Links and Cloudflare Anti-Bot Checks

Kratos, a subscription-based phishing-as-a-service platform, is targeting Microsoft 365 users in the United States, Europe, and other regions through campaigns designed to blend into ordinary document-sharing workflows. The operation abuses trusted services, including Microsoft SharePoint, OneDri

Jalisco, OmegaLord Phishing Kits Target Microsoft 365 Accounts

New Jalisco and OmegaLord phishing kits target Microsoft 365 accounts by abusing device code flows, OAuth tokens, and MFA prompts to maintain access. The post Jalisco, OmegaLord Phishing Kits Target

LTM leads deployment of Microsoft 365 Copilot across the L&T Group

LTM announced that it is leading the deployment of Microsoft 365 Copilot across the L&T Group, driving one of India's largest enterprise AI workplace transformations.