Search

About configuring multifactor authentication for Microsoft 365

Translated title. Original: Microsoft 365の多要素認証設定について

The university requires Microsoft 365 multifactor authentication to access its information services and is replacing SMS or voice verification with Microsoft Authenticator. The page gives setup guidance, overseas-use requirements, and advice for users changing devices.

Bc MFA

Bc MFA outlines how multi-factor authentication with a central identity provider works, its security benefits and limitations, including the gap between front-door checks and inside-session activity, and the risk of broad roles enabling wide access.

Artificial intelligence uprising? Humans will always be the biggest vulnerability | Hospodářské noviny (HN.cz)

Translated title. Original: Vzpoura umělé inteligence? Největší slabinou vždycky budou lidé | Hospodářské noviny (HN.cz)

The piece stresses strong password practices, advising long, complex passwords and two-factor authentication, while noting the challenge of creating secure credentials.

Why is MFA not being used, even though it is mandatory? | Trivore

Translated title. Original: Miksi MFA jää käyttämättä, vaikka se on pakollinen? | Trivore

MFA is required by policy but not always implemented in practice; gaps come from exceptions and alternative login methods. Effective measurement and governance are needed to reduce non-compliant logins and tighten controls around high-privilege accounts.

Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations

Cybersecurity researchers describe a Microsoft 365 token-replay campaign using an AitM relay to capture and replay sign-in tokens, compromising 97 accounts across 79 organizations. The attack bypasses MFA by injecting rogue authenticators and devices, with over 200,000 login attempts and 48 rogue Entra devices detected; indicators tie the activity to specific IP ranges and phishing-related techniques.

Beware of passwords suggested by Google's artificial intelligence – Hacks.gr – Cybersecurity, Hacking & Tech News

AI-generated password suggestions in Google search results can be non-unique across users and accounts, especially when users are logged in; tests show repeated passwords due to caching and predictable patterns, with caution advised against using AI-generated passwords and guidance to rely on private, unique methods.

Microsoft 365 accounts compromised at 79 organizations, no passwords needed - Help Net Security

A hacker used stolen Microsoft 365 session tokens to breach 79 organizations without passwords, using AiTM phishing and token replay to bypass MFA. The campaign spanned July–September 2026, involved hundreds of sign-ins and many failed attempts, used rogue devices and inbox-rule concealment, and was traced to multiple IPs and a Hamburg-based hosting provider; mitigation guidance and indicators of compromise were published.

Keplr Pauses Google, Apple Login: What Users Should Do · CryptRing

Keplr paused Google/Apple social login after reports of unauthorized transactions, with Web3Auth involved in the investigation. The incident may affect Google/Apple-login wallets, while recovery-phrase and hardware-wallet accounts seem unaffected; no final findings or post-mortems have been published, and users are advised to follow official guidance and avoid adding funds or re-importing accounts while the investigation continues.

Nine out of ten compromised Microsoft 365 organizations have MFA enabled: blind spots revealed by a survey of 1,002 people — the barrier to reviewing security is not cost - TechTarget Japan

Translated title. Original: Microsoft 365侵害企業の9割はMFA導入済み　1002人調査で見えた盲点：セキュリティ見直しの障壁は「費用」ではない - TechTargetジャパン

A TechTarget Japan report analyzes why MFA, though common in Microsoft 365 deployments, fails to prevent account breaches due to poor ongoing operation and misconfigurations; 71.5% of surveyed firms experienced breaches or suspicions in the past year, with MFA already in place in most cases. The study highlights gaps in continuous monitoring, frequent misconfigurations, and organizational barriers that hinder regular security reviews.

1Password for Agents: AI agents access your accounts without seeing the password - Artificial Intelligence

Translated title. Original: 1Password for Agents: gli agenti AI accedono ai tuoi account senza vedere la password - Intelligenza Artificiale

1Password launches For Agents to let AI assistants access accounts securely: agents request access, users approve on their device, and 1Password fills the password without exposing it. This reduces risk from agent prompts and logs, while expanding integrations with major AI agents; banks remain cautious about agent-driven access.