The Microsoft Defender Security Research Team has confirmed that a pervasive new authentication code attack is compromising ...

A new wave of device code phishing shows how threat actors are scaling account compromise using AI and end‑to‑end automation.

Microsoft's Attack Simulation Training product now shows more information about how users interacted with simulated phishing attacks, per a Tuesday announcement. IT pros now get additional information ...

Enhanced phishing protection in Microsoft Defender is a security feature designed to guard against phishing attacks that attempt to steal users’ personal or login information. It works by actively ...

One of the easier ways to steal a user's credentials is through a convincing fake login page or application. An unwitting user can quickly give an attacker the crucial "in" to an organization's ...

Microsoft 365 administrators can use built-in Defender for Office 365 tools to enable impersonation and domain protection, reducing phishing risks by identifying spoofed senders and untrusted domains.