Topic

Microsoft 365: news, advisories and analysis

3 articlesUpdated 17 Oct 2026

CyberSecureToday covers Microsoft 365 across 3 articles published between 13 Sep 2026 and 17 Oct 2026. The coverage includes 1 vulnerability advisory and 2 incident or breach reports.

Stories on Microsoft 365 most often intersect with Entra ID, ConnectWise and Supply Chain Attack, with Technology, Cloud & SaaS the most affected sector. The most recent story, “ConnectWise Cloud Backup Credential Leak Weaponized to Hijack Microsoft 365 Tenants”, was published 17 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Latest coverage

Cyber AttackCloud & SaaS
ConnectWise Cloud Backup Credential Leak Weaponized to Hijack Microsoft 365 Tenants
A compromised vendor credential in ConnectWise Cloud Backup allowed threat actors to abuse OAuth application tokens across hundreds of Microsoft 365 customer tenants.
Aisha Noor17 Oct 202610 min read
Cyber AttackGov & Defence
China-Aligned TA419 Impersonates White House and Anthropic Figures to Target AI Experts
Proofpoint: China-aligned TA419 posed as an ex-White House OSTP official and an Anthropic employee to steal AI policy experts' Microsoft 365 sessions.
Daniel Okafor3 Oct 20266 min read
ThreatsCloud & SaaS
Microsoft traces passkey-themed lures to persistent Microsoft 365 cloud compromise
Microsoft says attackers are using passkey and SSO update pretexts to capture sessions, add MFA methods and collect Microsoft 365 data.
Aisha Noor13 Sep 20266 min read

Latest coverage

ConnectWise Cloud Backup Credential Leak Weaponized to Hijack Microsoft 365 Tenants

China-Aligned TA419 Impersonates White House and Anthropic Figures to Target AI Experts

Microsoft traces passkey-themed lures to persistent Microsoft 365 cloud compromise