#Microsoft 365
All CosmicBytez Labs articles tagged #Microsoft 365, across news, security advisories, how-to guides, and projects.
- News
Nikkei Discloses Breaches of Employee Microsoft 365, Google Workspace Accounts
Japanese publisher Nikkei disclosed breaches of two employee email accounts, one used to send roughly 9,000 phishing emails to staff and sources.
- News
Microsoft Pauses KB5002907 Update After Office License Deactivations
Microsoft paused KB5002907 after the optional update deactivated or removed perpetual Office 2016 and 2019 installs on some devices.
- News
Microsoft to Retire Microsoft 365 Companion Apps in December
Calendar, People, and Files taskbar apps stop working December 16, 2026; admins must remove them from managed devices.
- News
Passkey-Themed Phishing Attacks Lead to Microsoft 365 Data Theft
ShinyHunters and Helix affiliates use fake passkey/help-desk lures with AiTM and device-code phishing to steal Microsoft 365 data.
- News
Microsoft Rolls Out Classic Outlook Theme for New Outlook Users
Microsoft is rolling out a Classic Outlook theme for Outlook on the web and New Outlook for Windows, giving users familiar visual styling from legacy Outlook.
- News
Hotel Wi-Fi Attacks Use Custom Malware to Breach Microsoft 365 Accounts
Russia-linked APT29 subgroup Storm-2945 is hijacking hotel and conference centre Wi-Fi captive portals to steal Microsoft 365 tokens from travelling...
- News
Microsoft Blames Massive Microsoft 365 Outage on Automated Maintenance Bug
Microsoft has revealed that a bug in its automated network maintenance request system caused Thursday's major global outage by mistakenly removing IP...
- News
Misconfigured Server Exposes Three Evilginx Phishing Ops Targeting M365
An attacker's operational security mistake — leaving a Python HTTP server and .bash_history exposed on a public port — allowed researchers to uncover...
- News
Crafty Phishing Campaigns Auto-Adapt to Victim's Device, OS
Phishing kits now fingerprint victims via user-agent headers to deliver OS-specific payloads automatically — device code phishing attacks spiked 1,380% in...
- News
Hackers Target Microsoft 365 Accounts with 81 Million Login Attempts
A two-week password-spray campaign generated over 81 million Microsoft 365 login attempts against 64 organizations, exploiting misconfigured MFA policies...
- Newsletter
June 17 Digest: Teams C2 Evasion, Copilot Data Theft, iRhythm Breach, cPanel KEV
DragonForce hides C2 inside Microsoft Teams relay traffic; a SearchLeak attack weaponizes M365 Copilot for one-click data exfiltration; iRhythm confirms...
- News
FBI Warns of Kali365 Phishing-as-a-Service Targeting
The FBI has published an advisory on Kali365, a Telegram-based phishing-as-a-service platform that captures legitimate OAuth tokens to gain persistent...
- News
Tycoon2FA Hijacks Microsoft 365 Accounts via Device-Code
The Tycoon2FA phishing-as-a-service platform has added device-code phishing to its arsenal and abuses Trustifi click-tracking URLs to bypass Microsoft 365...
- News
ConsentFix v3 Automates Azure OAuth Abuse With Mass
A new iteration of the ConsentFix attack toolkit has surfaced on cybercriminal forums, adding automation and scaling capabilities to OAuth consent...
- HOWTO
The Microsoft 365 Security Baseline Every Small Business Should Have
Eight settings inside the Microsoft 365 admin console that take less than two hours to configure and block 90% of the credential-based attacks targeting…
- News
Device Code Phishing Attacks Surge 37x as New Kits Spread
Device code phishing attacks abusing the OAuth 2.0 Device Authorization Grant flow have exploded 37-fold in 2026 as ready-made phishing kits proliferate...
- Checklist
Microsoft 365 Tenant Security Checklist
Comprehensive security checklist for Microsoft 365 and Entra ID tenants — Conditional Access policies, MFA enforcement, audit logging, DLP configuration,...
- HOWTO
Microsoft 365 Security and Compliance Configuration Guide
Harden your Microsoft 365 tenant with security baselines, conditional access policies, data loss prevention, audit logging, and compliance configurations...
- Project
Microsoft 365 Security Baseline Implementation
Implement a comprehensive security baseline for Microsoft 365 tenants covering identity protection, email security, endpoint management, data governance,...
- HOWTO
Exchange Online Security Hardening for Enterprise
Secure your Exchange Online environment with mail flow rules, anti-spam policies, DMARC enforcement, admin audit controls, and mailbox permission hardening.
- HOWTO
Intune Device Enrollment: Windows Autopilot Setup
Configure Windows Autopilot for zero-touch device deployment. Covers hardware hash import, deployment profiles, ESP configuration, and user-driven enrollment.