aiqbench analysis
This article details a sophisticated phishing campaign exploiting passkey authentication flows to bypass Multi-Factor Authentication (MFA) and exfiltrate data from Microsoft 365 environments. The primary focus is on the security implications of cloud identity management and the specific vulnerabilities in modern authentication protocols when targeted by social engineering. While it touches on cybersecurity, the core subject matter is the integrity and mechanics of AI-driven or protocol-based authentication systems within enterprise infrastructure.
Hackers Use Passkey-Themed Phishing to Hijack Microsoft 365 Accounts and Steal Cloud Data
Hackers are using passkey-themed phishing to take control of Microsoft 365 accounts and collect cloud data. It can defeat MFA protections. The campaign starts with calls and texts to employees. Attackers pose as IT support, claim a passkey, MFA, or single sign-on setting needs attention, and direct targets to lookalike sign-in pages. Compromised accounts can […] The post Hackers Use Passkey-Themed Phishing to Hijack Microsoft 365 Accounts and Steal Cloud Data appeared first on Cyber Security News.
Hackers are using passkey-themed phishing to take control of Microsoft 365 accounts and collect cloud data. It can defeat MFA protections. The campaign starts with calls and texts to employees. Attackers pose as IT support, claim a passkey, MFA, or single sign-on setting needs attention, and direct targets to lookalike sign-in pages. Compromised accounts can also send lures through Microsoft Teams. Microsoft researchers identified the activity across cloud intrusions observed since May 2026. They…
Excerpt shown under the publisher's RSS terms · 74 words · full text and figures are on the publisher's site
Related coverage
Hackers Abuse Compromised Outlook Accounts to Steal MFA-Protected Microsoft 365 Sessions
Cybersecurity News · Jul 22, 2026
Top 10 Phishing Kits Used by Hackers to Launch Cyberattacks (July 20-26, 2026)
Cybersecurity News · Jul 28, 2026
Weekly Cyber Security Newsletter Bulletin – Entra ID RCE, Claude Code Ransomware, T-Mobile Cable, Azure Credential Theft +20 Stories
Cybersecurity News · Aug 23, 2026
Hackers Registered New Domain with Exact Microsoft Teams Interface to Steal Logins
Cybersecurity News · Oct 8, 2026