A phishing kit subverting Microsoft’s legitimate authentication flow lets attackers break into accounts without stealing passwords or creating fake login pages

A shift in operational pattern of the infamous Vietnam-aligned APT group

A company that's expecting a cyberattack but hasn’t actively prepared for it risks making the hardest decisions at the worst possible moment

Every organisation gets audited. The question is who does the auditing.