TWINLOOT uses SharePoint, Teams, Azure and the victim’s own Edge browser to hide command-and-control traffic inside trusted Microsoft infrastructure.

TWINLOOT uses SharePoint, Teams, Azure and the victim’s own Edge browser to hide command-and-control traffic inside trusted Microsoft infrastructure. Security researchers are warning of a newly ...

A Python-based malware framework is taking the concept of living off the land (LOTL) to a whole new level by operating its entire command-and-control (C2) from inside Microsoft Azure and 365 services, ...

GitLab vulnerability CVE-2026-19478 carries a CVSS 9.4 rating, letting unauthenticated attackers remotely delete or modify public projects with no login required. An emergency patch released August 17 ...

How a hackathon dictation app running Speechmatics on-device speech-to-text exposed why real-time diarization needs GPU acceleration, CoreML, and DirectML.

AitM phishing hijacks Microsoft 365 accounts, then uses residential proxies and Microsoft Graph API access to collect payroll ...

Authenticated vulnerability scanning breaks on OAuth, MFA, and CAPTCHA. See how to hold a real session and test the surface ...

Greatness PhaaS adds device code phishing to bypass MFA and steal OAuth tokens alongside AiTM and consent abuse.

The command-line mail software Himalaya 2.0.0 supports Gmail via the Gmail REST API as well as Outlook and Microsoft 365 mailboxes via Microsoft Graph. In addition to the classic IMAP and SMTP methods ...

AWS has brought its Amazon Quick assistant directly into Microsoft 365, announcing on August 13, 2026 that extensions for ...

TripGain MCP Server launches at GBTA Convention 2026, extending agentic AI beyond flight booking to handle employee expense submission, vendor invoice reconciliation, and approval routing in a single ...

Greatness attackers spoof RingCentral alerts to steal Microsoft 365 tokens through AiTM and device-code phishing attacks.