Unwitting employees register a hacker’s device to their account; the crook then uses the resulting OAuth tokens to maintain persistent access.

Microsoft has confirmed that a bug in its Office suite allowed Copilot AI to surface private email content from users’ Exchange Online accounts, even when data loss prevention policies were in place.

Microsoft 365 has become the operational backbone for modern small and mid-sized businesses. From email and document collaboration to Teams meetings and cloud storage, it powers daily workflows across ...