Do Son Microsoft’s DCU has seized 338 websites to disrupt RaccoonO365, a growing phishing service used to steal Microsoft 365 credentials from 94 countries.
Microsoft 365
Microsoft is testing a full-screen "SCOOBE" interface in Windows 11 to remind users about Microsoft 365 subscriptions, and it may block access to the desktop.
Microsoft is giving a free one-year subscription to Microsoft 365 Personal to all U.S. university students, including access to Copilot and 1TB of storage.
Microsoft is eliminating volume-based enterprise discounts for its online services, a move that could significantly raise costs for many small and medium businesses.
Microsoft's Universal Print Anywhere is now available to all users, offering a secure cloud printing solution with QR code authentication to prevent data leakage.
Microsoft is automatically installing new People, File Search, and Calendar apps to the Windows 11 taskbar for Microsoft 365 enterprise subscribers.
Microsoft 365 intelligent services like Read Aloud and Dictation will stop working on older versions. Update to 16.0.18827.20202 by Jan 2026.
Proofpoint reveals an AiTM phishing campaign using fake OAuth apps and the Tycoon platform to bypass MFA, hijack Microsoft 365 accounts, and steal credentials.
Cloudflare exposes a phishing campaign that abuses link wrapping services like Proofpoint and Intermedia, making malicious URLs appear legitimate to bypass security and trick users.
OneNote Insiders are getting new features: cell merging for tables (Windows, Mac, iPad) and a "paste text only" option (Ctrl+Shift+V) for cleaner note-taking.
Microsoft is deprecating its UWP-based Microsoft 365 app. Functional updates end Oct 2025, security updates Dec 2026. Users must switch to Click-to-Run for continued support.
LibreOffice claims Microsoft uses overly complex OOXML file formats to intentionally lock users into its ecosystem, hindering migration and interoperability with open-source alternatives.
Microsoft's Startup Boost preloads 365 apps for faster launch. Initially default on some Win 11 versions, it now appears disabled. Check your Task Scheduler!
Microsoft extends Windows 10 security updates via ESU until Oct 2028 and Microsoft 365 support, giving users more time to migrate to Windows 11.
A flaw (CVE-2025-4679) in Synology ABM leaked a static client_secret, allowing unauthenticated attackers read-only access to all Microsoft 365 tenants with ABM installed.
Varonis uncovers a widespread phishing campaign abusing Microsoft 365's Direct Send, spoofing internal users to bypass email security and harvest credentials.
Microsoft 365 Boosts Security: Legacy File Access Protocols RPS & FrontPage RPC Phased Out July 2025
Microsoft 365 Boosts Security: Legacy File Access Protocols RPS & FrontPage RPC Phased Out July 2025
Microsoft will disable outdated RPS and FrontPage RPC protocols for file access in Microsoft 365, Office, SharePoint, and OneDrive starting July 2025 to enhance security.
A Reddit user lost 30 years of data after their OneDrive account was suspended, underscoring the critical need for multiple backup solutions beyond single cloud reliance.
Microsoft's latest Work Trend Index warns of the "infinite workday," where work increasingly spills into personal time, driven by hybrid models and AI integration.
TeamFiltration is being actively exploited in UNK_SneakyStrike, targeting over 80,000 Microsoft Entra ID accounts with password spraying and data exfiltration.
A new Sekoia report reveals a surge in AitM phishing, leveraging industrialized PhaaS kits to bypass MFA and compromise Microsoft 365 and Google accounts.
UNC6040 is using sophisticated vishing to breach Salesforce, tricking employees into granting access, exfiltrating data, and then pivoting to other cloud platforms.