Hackers Target 5,700 Microsoft 365 Accounts Using Forgotten Service Accounts With No MFA
Proofpoint says UNK_CondorFiltration password-sprayed 5,700 Microsoft 365 accounts and breached seven MFA-less service accounts in Chile.
74
Product
Azure Portal
- Mentions · 7d0
- Mentions · 30d0
- All mentions2
- First seenSep 18, 2026
- Last mentionedSep 30, 2026
Timeline
2 articles · newest firstMicrosoft Patches 18 Vulnerabilities in AI, Cloud Products
Microsoft patched 18 elevation-of-privilege and information-disclosure vulnerabilities across Azure and Copilot products; all fixed server-side with no exploitation observed.
40
Related CVEs
by mentions- Double Free in Windows Secure Kernel Mode Enables Local Privilege Escalation
Appears with
- Microsoftvendor · 2
- OneDriveproduct · 1
- Azure Container Registryproduct · 1
- Microsoft 365 Copilotproduct · 1
- Proofpointorganization · 1
- Microsoft Dataverseproduct · 1
- Microsoft Fabricproduct · 1
- Microsoft 365product · 1
- Windowsproduct · 1
- Azureproduct · 1
- Microsoftorganization · 1
- Azure Cosmos DBproduct · 1
- Proofpointvendor · 1
- TeamFiltrationproduct · 1
- Azure AI Foundryproduct · 1
- Microsoft Entra IDproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.