6 of 100 stories tagged “Microsoft 365”
More 129
Microsoft Defender Flags Legitimate Google Search Links as Malicious
Microsoft is investigating a Defender for Office 365 Safe Links misclassification that blocks legitimate Google search URLs, showing "Opening this website might not be safe" warnings across affected tenants.
NovaCookies Phishing Kit Uses Real Docusign Emails to Steal Microsoft 365 Sessions
A subscription phishing platform called NovaCookies uses genuine Docusign envelopes and legitimate Microsoft or Google redirect hops to steal authenticated Microsoft 365 sessions, bypassing MFA for hundreds of organizations, according to researchers at Island.
Microsoft Lets Users Restyle New Outlook to Look Like Outlook Classic
Microsoft is rolling out a theme that reskins New Outlook for Windows and Outlook on the Web to visually resemble Classic Outlook, easing the transition ahead of Classic Outlook's opt-out phase starting April 2026, but the cosmetic change does not restore missing features like VBA macros or COM add-ins.
CVE-2026-62873: Critical Microsoft 365 Admin Center EoP Flaw Patched
Microsoft patched CVE-2026-62873, a critical elevation-of-privilege flaw in Microsoft 365 Admin Center caused by improper cryptographic signature verification, as part of its August 2026 Patch Tuesday release covering 421 CVEs.
DEBULL Tooling Abuses Microsoft Device-Code Flow to Hijack M365 Accounts
Researchers at ZeroBEC say a Microsoft 365 device code phishing campaign observed from late June into early July 2026 used collaboration-themed lures and a reusable tooling layer dubbed DEBULL to hijack accounts without stealing passwords or defeating MFA directly. The activity shares strong overlaps with Microsoft's Storm-2372 tradecraft.
Samsung's April 2026 Update Breaks Microsoft 365 Apps on Galaxy Phones
After installing Samsung's April 2026 security update, Galaxy users - mainly on the S25 Ultra and S24 - report Microsoft Teams, Outlook, OneDrive, and Authenticator repeatedly failing. Community and reporting trace the cause to a WebView regression, with workarounds available while a fix rolls out.