Cycode has disclosed a high-severity OAuth vulnerability in Anthropic’s official Model Context Protocol (MCP) Python SDK that ...

When you use a company-issued PC every day, it can gradually start to feel like your own personal computer. Watching YouTube Opening personal Gmail Adding convenient-looking Chrome extensions Pasting ...

A practical guide for DX personnel, internal IT staff, and accounting staff at small and medium-sized enterprises (as of September 2026)Introduction“The Excel macro I received from a business partner ...

Microsoft Graph Data Connect can now expose additional metadata for read-locked and archived SharePoint sites, giving governance and analytics teams more context about inactive content.

A recently patched SharePoint flaw could give attackers a way to run code on vulnerable servers, and new research shows how it can be combined with authentication weaknesses to launch an attack ...

New unredacted information in the copyright lawsuit The New York Times brought against OpenAI and Microsoft three years ago reveals an admission that AI scraping was tantamount to theft, and that AI ...

Extortion gangs are using passkey and SSO phishing to hijack Microsoft accounts, steal tokens, and exfiltrate Microsoft 365 data.

Microsoft says threat actors linked to ShinyHunters, Helix, and other extortion gangs are using passkey and single sign-on-themed social engineering attacks to compromise corporate Microsoft accounts ...

Attackers use social engineering, calling personal phones, to steal Microsoft 365 access and pull SharePoint and OneDrive data.

A Baltimore City senior employee sought to cut the Inspector General’s access to their emails and documents while under investigation last year, prompting the watchdog to conclude the move violated ...

Security decisions in Teams, SharePoint, and OneDrive can affect risk in the others. A collaboration incident can begin with a malicious link or compromised account, then expand through trusted access ...