Microsoft 365
Microsoft 365 accounts targeted in wave of OAuth phishing attacks
Multiple threat actors are compromising Microsoft 365 accounts in phishing attacks that leverage the OAuth device code authorization mechanism. Attackers trick victims into entering a device code on Microsoft’s legitimate device login page, unknowingly authorizing an attacker-controlled application and granting them access to the target account without stealing credentials or bypassing multi-factor authentication (MFA). Although the […]
Microsoft to block Exchange Online access for outdated mobile devices
Microsoft announced on Monday that it will soon block mobile devices running outdated email software from accessing Exchange Online services until they’re updated. As the Exchange Team explained, devices running Exchange ActiveSync versions below 16.1 will no longer be able to connect to Microsoft’s cloud email service after March 1, 2026. Exchange ActiveSync (EAS) is a Microsoft Exchange […]
Microsoft 365 license check bug blocks desktop app downloads
Microsoft is investigating and working to resolve a known issue that prevents customers from downloading Microsoft 365 desktop apps from the Microsoft 365 homepage. As detailed in a Wednesday incident report (OP1192004) seen by GeekFeed, this bug has been impacting users since November 2nd, causing Office Client issues for affected customers. Microsoft has already developed […]
Microsoft is speeding up the Teams desktop client for Windows
Microsoft says it will add a new Teams call handler beginning in January 2026 to reduce launch times and boost call performance for the Windows desktop client. A new process, ms-teams_modulehost.exe, will be used after rollout to handle calling features under the primary ms-teams.exe app process, according to Microsoft. “We’re improving the performance and startup […]
Sneaky2FA PhaaS kit now uses redteamers’ Browser-in-the-Browser attack
The Sneaky2FA phishing-as-a-service (PhaaS) kit has added browser-in-the-browser (BitB) capabilities that are used in attacks to steal Microsoft credentials and active sessions. Sneaky2FA is a widely used PhaaS platform right now, alongside Tycoon2FA and Mamba2FA, all targeting primarily Microsoft 365 accounts. The kit was known for its SVG-based attacks and attacker-in-the-middle (AitM) tactics, where the authentication process is […]
Thunderbird adds native support for Microsoft Exchange accounts
Thunderbird 145 has been released with full native support for Microsoft Exchange email via the Exchange Web Services (EWS) protocol. This means that Thunderbird users in Microsoft Exchange environments (e.g., Microsoft 365, Office 365) no longer need third-party add-ons and benefit from seamless message synchronization and folder management locally and on the server. Migrating from […]
Microsoft: Windows bug blocks Microsoft 365 desktop app installs
Microsoft is working to resolve a known issue preventing users from installing the Microsoft 365 desktop apps on Windows devices. In a Friday service alert seen by GeekFeed, Microsoft said that this bug is caused by misconfigured authentication components and may affect any customer attempting to install Microsoft 365 desktop apps version 2508 (Build 19127.20358) […]
Microsoft rolls out screen capture prevention for Teams users
Microsoft is rolling out a new Teams feature for Premium customers that will automatically block screenshots and recordings during meetings. Microsoft announced the feature in May 2025, stating that the rollout would begin in July 2025. However, as revealed on Wednesday, this was delayed until early November. Named “Prevent screen capture,” it restricts access to visual meeting […]
Quantum Route Redirect PhaaS targets Microsoft 365 users worldwide
A new phishing automation platform named Quantum Route Redirect is using around 1,000 domains to steal Microsoft 365 users’ credentials. The kit comes pre-configured with phishing domains to allow less skilled threat actors to achieve maximum results with the least effort. Since August, analysts at security awareness company KnowBe4 have noticed Quantum Route Redirect (QRR) attacks in the wild across […]
Microsoft promises more Copilot features in Microsoft 365 companion apps
Microsoft 365 companion apps will be getting more Copilot features in the coming weeks. Right now, Copilot works only inside two companion apps, People and Files. In the coming weeks, Microsoft plans to add Copilot to the Calendar companion as well. For those unaware, Microsoft 365 companions are only available for enterprises or businesses. Microsoft 365 Personal users won’t get […]