search
Microsoft Authenticator
Trends
- 1
A new essay argues that passkeys, the passwordless login technology promoted by Apple, Google and Microsoft as the future of authentication, are actually a trap users should avoid. The author's core complaint is that passkeys often lock credentials inside specific platforms and ecosystems, undermining portability and leaving users dependent on individual vendors. The piece is drawing active debate among developers and security-minded readers, many of whom share concerns about platform lock-in while others defend the technology's security benefits.
- 2GreyNoise flags malicious IPs in live Entra ID demo●During a live product demo, GreyNoise-labeled malicious IPs were identified in an organization’s Entra ID sign-in logs.
During a live product demonstration, security company GreyNoise identified IP addresses it labels as malicious inside an organization's Microsoft Entra ID sign-in logs. The addresses looked benign at first glance, appearing residential and matching expected geolocations. The tell was multiple users authenticating from the same IP address, a pattern inconsistent with normal user behavior and a signal of potential compromise.
- 3Passkeys Are Not a Trap, Security Researcher Argues●Passkeys Are Not a Trap https:// scotthelme.co.uk/passkeys-are- not-a-trap/ Comments: https:// news.ycombinator.com/item
Security researcher Scott Helme has published a blog post arguing that passkeys, the passwordless authentication standard backed by Apple, Google and Microsoft, are a genuine security improvement rather than vendor lock-in or a trap for users. The piece is being actively discussed on Hacker News, where commenters are debating the usability and adoption concerns around passkeys.
- 4Security researchers flag Microsoft Office phishing site●Possible Phishing 🎣 on: ⚠️hxxps[:]//officedesignappl0auth-1316860111[.]cos[.]na-ashburn[.]myqcloud[.]com/index[.]html 🧬
Cybersecurity researchers have flagged a suspicious website impersonating an Office design application login page, hosted on a Tencent cloud storage domain. The page, which mimics a Microsoft authentication screen, is being shared as a likely phishing scam designed to steal credentials. A full technical analysis of the URL has been published for defenders.
- 5Microsoft Authenticator moves Android backups to Google One●Microsoft Authenticator will transition its Android backup system to Google One. Discover how this 2027 update affects y
Microsoft plans to shift Microsoft Authenticator's backup system on Android to Google One, with the change rolling out as part of a 2027 update. The move affects how users store and restore their account credentials, raising questions about storage limits and security under the new cloud arrangement. Cybersecurity commentators are flagging what the transition means for account recovery workflows.
- 6Microsoft Windows Server flaw logged as EUVD-2026-73019●🚨 EUVD-2026-73019 📊 Score: 5.5/10 (CVSS v3.1) 📦 Product: Windows Server 2025, Windows Server 2016 (Server Core installat
A medium-severity vulnerability affecting Microsoft Windows Server editions has been catalogued as EUVD-2026-73019, with a CVSS v3.1 score of 5.5 out of 10. The flaw involves missing authentication for a critical function, affecting Windows Server 2025, Windows Server 2016 (Server Core installation), Windows Server 2012 and more than sixteen other configurations. The entry was published on 8 September 2026 and updated on 7 October 2026. Administrators are advised to check whether patches are available for affected builds.
- 7Microsoft Exchange flaw lets attackers read other users' mailboxes●CVE-2026-96940 is an Exchange Server privilege escalation flaw rated CVSS 8.8. An authenticated attacker can potentially
A newly disclosed vulnerability in Microsoft Exchange Server, tracked as CVE-2026-96940, carries a high severity score of 8.8. Security researchers say an authenticated attacker could bypass authorization checks and read other users' mailboxes and attachments within the same on-premises Exchange organisation. The flaw does not allow pre-authentication remote code execution, but experts are warning administrators to review exposure and patch promptly.
- 8Fake ChatGPT and Gemini sites steal ad accounts and MFA codes●Fake ChatGPT, Gemini Sites steal advertising accounts, MFA codes https://www. bleepingcomputer.com/news/secu rity/fake-c
Fraudulent websites impersonating ChatGPT and Gemini are tricking users into handing over advertising account credentials and multi-factor authentication codes, according to a report by BleepingComputer. The fake AI sites harvest logins used for Google and Microsoft advertising platforms, potentially letting attackers hijack ad accounts and run costly fraudulent campaigns. Security researchers are warning businesses to verify URLs before signing in.
- 9China-Linked TA419 Hacks US AI Policy Experts●China-Aligned TA419 Targets U.S. AI Policy Experts With Microsoft AitM Phishing
TA419, a hacking group aligned with China, is targeting U.S. experts on artificial intelligence policy using Microsoft adversary-in-the-middle phishing techniques, according to The Hacker News. The attacks reportedly aim to steal credentials by intercepting authentication flows, raising concerns about foreign espionage aimed at shaping or tracking American AI policymaking.
- 10TA419 phishing campaign targeted AI-policy specialists●Proofpoint says TA419 impersonated AI-policy figures and used a real-time Microsoft 365 phishing proxy against fewer tha
Security firm Proofpoint reports that the threat group TA419 impersonated prominent AI-policy figures and used a real-time Microsoft 365 phishing proxy to steal authenticated login sessions. The highly targeted campaign hit fewer than ten specialists. Researchers say it shows how attackers can capture live sessions, though successful compromises and government attribution remain unclear.