Azure CLI Password Spray Attack Exposes Microsoft 365 MFA Gap

Azure CLI Password Spray Attacks Surge: Detection, Blocking, and Investigation Guide

Microsoft Entra ID (Azure AD) is experiencing a surge in password spray attacks targeting Azure CLI authentication endpoints. Unlike traditi

Azure CLI Password Spray Hits at Least 78 Microsoft Accounts in 81M+ Attempts

ConsentFix and ClickFix: How Microsoft 365 Accounts are Hijacked in 3 Seconds

Microsoft 365 device code phishing campaign abuses legitimate login flow to target accounts

A Microsoft 365 device code phishing campaign observed in late June and early July 2026 abused Microsoft's legitimate device login flow to t

FBI warns of Kali365 phishing kit that bypasses multifactor authentication on Microsoft 365

The FBI has issued a public service announcement about a new phishing-as-a-service kit called Kali365, which allows criminals to hijack Micr

DEBULL Tooling Abuses Microsoft Device-Code Flow to Target M365 Accounts