An Era Where One Stolen API Token Is the Key to 2,250 Companies — Lessons from the AI Agent Attack 'ARTEX' and the ConnectWise Incident

Introduction: What HappenedIn October 2026, the cloud backup service (Cloud Backup) of U.S. IT management vendor ConnectWise ...
Microsoft

Threat actors use agentic AI tooling to find and abuse exposed secrets

Microsoft Threat Intelligence has observed threat actors using the agentic offensive security framework ARTEX to search GitHub for OAuth application secrets, which can be used to compromise the ...

What can you see in Agent 365? Let's take a look at the Microsoft Entra admin center

Last time, we checked the list and usage status of agents within the organization in the Microsoft 365 admin center. This ...
Tech Times

China’s AI Agent Hacked 2,250 Microsoft 365 Tenants in Hours; MFA Didn’t Apply

China hackers agentic AI attack breached 2,250 Microsoft 365 tenants by exploiting a stolen ConnectWise Cloud Backup credential that bypassed MFA, Microsoft Threat Intelligence confirmed Wednesday, ...
Windows Report

Microsoft Again Urges Entra ID Users to Move From SMS to Passkeys

Microsoft is again warning Entra ID administrators to move users away from SMS and voice authentication before the company retires the methods in February 2027. Microsoft previously confirmed that SMS ...
BleepingComputer

Microsoft reminds admins to migrate Entra ID users to passkeys

Microsoft has reminded administrators to migrate Entra ID users to phishing-resistant methods, such as passkeys, to avoid sign-in disruptions after it retires SMS first-factor sign-in starting in ...
GitHub

Unified App

Unified App is a React and Node.js sample that brings Microsoft 365 presence, calendar, Outlook, Teams files, Entra ID, and diagnostic activity into one connected experience. It includes a ...
blog.csdn

在 Microsoft Graph 与 AAD Graph 活动日志中检测 Entra ID 攻击工具：NIST CSF 2.0 与 MITRE ATT&CK 框架映射驱动的 KQL 威胁狩猎实战

在 Microsoft Graph 与 AAD Graph 活动日志中检测 Entra ID 攻击工具：NIST CSF 2.0 与 MITRE ATT&CK 框架映射驱动的 KQL 威胁狩猎实战 【免费下载链接】Anthropic-Cybersecurity-Skills 817 structured cybersecurity skills for AI ...
blog.csdn

基于 Graph Activity Logs 检测 Entra 攻击工具的 Schema 与 KQL 参考指南（Anthropic-Cybersecurity-Skills）

本指南围绕 Anthropic-Cybersecurity-Skills 仓库中 detecting-entra-offensive-tools-in-graph-logs 技能的参考文档展开，系统讲解 MicrosoftGraphActivityLogs 与 AADGraphActivityLogs 两张目录 API 活动日志表的字段结构、跨表 ...
TechRepublic

Microsoft Plans to End SMS and Voice Authentication for Entra ID

Microsoft is reportedly phasing out SMS and voice authentication in Entra ID. See the claimed deadlines and what IT administrators should do next. Image: Simon Ray/Unsplash Microsoft reportedly plans ...
Redmond

Microsoft Entra Private Access Offers a Zero Trust Path Beyond Always-On VPN

Why: "Traditional remote-access VPNs grant broad network access after a single authentication event, creating excessive privilege and enabling lateral movement, while also requiring public exposure of ...
Help Net Security

Microsoft Entra ID is removing an extra MFA hurdle for Windows Hello and macOS PSSO users

Microsoft is changing how Entra ID handles MFA for people who sign in with Windows Hello for Business (WHfB) or macOS Platform Single Sign-On (PSSO). The rollout reaches worldwide and GCC tenants ...