Microsoft Entra will retire its SMS and voice MFA services on February 1, 2027, as it moves public cloud customers toward passkeys.

'Nothing is safe anymore. The more layers of protection we can have, the better I sleep,’ Randy Jorgensen, managing member of South Jordan, Utah-based RJNetworks, tells CRN. Microsoft will take a ...

Microsoft added that external MFA solutions and federated identity providers will continue to be supported and will meet the MFA requirement if they are configured to send an MFA claim. The ...

Starting in October, all Microsoft Azure customers will be required to have multifactor authentication (MFA) enabled on their accounts, Microsoft said. From Microsoft ...

Microsoft warned Entra global admins on Thursday to enable multi-factor authentication (MFA) for their tenants until October 15 to ensure users don't lose access to admin portals. This is part of ...

Microsoft has confirmed an outage that affected its multi-factor authentication (MFA) system, causing service disruptions for users attempting to access Microsoft 365 applications. The issue, ...

A highly organized phishing-as-a-service operation (PhaaS) is targeting Microsoft 365 accounts across financial firms with business email compromise (BEC) attacks that leverage a two-factor ...

A password spray campaign targeting Azure CLI sign-ins exposed how narrow Conditional Access policies can leave Microsoft 365 accounts vulnerable even when MFA is enabled. Attackers found a Microsoft ...

The issue could allow threat actors to brute force MFA authentication codes for Outlook, Teams, and Azure access with 50% accuracy. Microsoft may have silently fixed a problem with its MFA ...

The FBI says hackers are breaking into hundreds of Microsoft 365 accounts every day using a phishing platform called Kali365. Instead of stealing passwords, the attack steals login tokens to access ...