Information securityfromTheregister1 month agoAWS nails Russia's Cozy Bear trying to nick Microsoft credsAPT29 used watering-hole attacks and Cloudflare-mimicking domains to trick Microsoft users into authorizing attacker-controlled devices and gaining access to accounts and data.
Privacy technologiesfromZDNET2 months agoI replaced my Microsoft account password with a passkey - and you should, tooSwitching to a passwordless Microsoft account enhances security and defends against phishing attacks.