Microsoft 365

02 London-based Inforcer, which helps managed service providers handle their clients' Microsoft 365 accounts, raised a $50M Series C led by Insight Partners.

03 NovaCookies is a subscription-based phishing platform priced at $320/month.

04 A Syskit survey shows 90% of IT leaders report security incidents linked to overlooked permissions.

05 Microsoft Teams and several Microsoft 365 services are experiencing an ongoing outage, with users reporting problems accessing Teams, SharePoint, Excel and the Microsoft 365 Admin Center.

06 Microsoft 365 and Outlook are still seeing service degradations on Tuesday, the company's status page indicates.

07 Jalisco and OmegaLord use techniques that defeat multi-factor authentication.

08 The UK CMA is investigating Microsoft over potential consumer law breaches involving Microsoft 365 subscription renewals that added Copilot.

09 Some users are experiencing issues searching in Microsoft 365 apps, including Outlook on the web, Outlook desktop, SharePoint Online, and OneDrive.

10 ARToken appears to operate as an affiliate of the EvilTokens phishing platform

11 HollowGraph uses the calendar feature in compromised Microsoft 365 mailboxes as a command-and-control channel to receive attacker commands and exfiltrate stolen data.

12 The campaign uses residential proxies to disguise malicious sign-ins as ordinary consumer traffic.

13 Forg365 uses artificial intelligence–assisted lure creation.

14 BigBear phishing crew nets thousands of Microsoft 365 credentials

15 Hackers are changing the DNS settings on Wi-Fi devices at hotels and conference centers to redirect users to fake Microsoft 365 login pages.