Tag: Microsoft 365

Microsoft has confirmed a search outage affecting some Microsoft 365 users across Outlook, SharePoint Online and OneDrive. The issue affects Outlook on the web, the Outlook desktop app, SharePoint Online and OneDrive. Microsoft has linked the disruption to a recent deployment that placed extra pressure on affected infrastructure. Microsoft 365 search outage affects several apps…

Microsoft has linked a global campaign against hospitality Wi-Fi networks to Midnight Blizzard, a Russian threat actor also known as APT29. The hotel Wi-Fi attacks target Microsoft 365 accounts through manipulated DNS settings, phishing pages, device code abuse, and custom malware. Microsoft calls the campaign CaptiveCrunch. The activity has been active since at least early…

Hackers are compromising hotel and conference-centre Wi-Fi gateways to redirect guests to fake Microsoft 365 login pages. The campaign appears to target travelling employees across several industries, putting business emails, documents and other sensitive data at risk. Researchers identified compromised Wi-Fi devices in several US cities, as well as locations in India and Saudi Arabia.…

A major Microsoft 365 outage disrupted Teams, SharePoint, OneDrive and several other cloud services for users in North America on 23 July. The incident began at approximately 10:44 AM ET and affected customers using certain network paths. Microsoft later confirmed that it had resolved the issue after reverting a networking update. Teams, SharePoint and OneDrive…

A Microsoft 365 outage caused widespread service disruptions across multiple core products, including Teams, Outlook, and Microsoft Defender. The incident affected users across North America and temporarily limited access to communication, collaboration, and security tools relied on by businesses and individuals. The Microsoft 365 outage highlighted the scale of dependency on cloud-based productivity platforms. Even…

Microsoft 365 OAuth phishing attacks are increasing, with threat actors targeting enterprise users through legitimate authentication workflows. Instead of stealing passwords, attackers now trick users into granting access by abusing OAuth device code authentication. These campaigns rely on social engineering rather than technical exploits. Victims are guided to Microsoft’s official login pages, which lowers suspicion…

Attackers are now exploiting trusted link wrapping services to steal Microsoft 365 credentials. The threat actors abused features in Proofpoint and Intermedia to mask phishing links. How Attackers Exploited Trusted Links From June through July 2025, attackers compromised email accounts with active link wrapping. They inserted malicious URLs, often shortened first. Then the wrapping service…