Token replay gave attackers Microsoft 365 access at 79 organizations
Huntress logged 497 successful sign-ins and over 200,000 failures from July 14 to September 22, 2026.
2
Stories per day · 30 days
4 RSS
3 stories, newest first · one card per story
Stories tagged #aitm-phishing
The EDR blind spot: 3 ways browser attacks evade endpoint telemetry
NordLayer argues browser-based SaaS attacks, including AiTM phishing and malicious extensions, often evade traditional EDR.
4
Attackers use passkey-themed scams to hijack Microsoft 365 accounts
Microsoft tracks ongoing M365 cloud intrusions since May using passkey-themed helpdesk vishing, AiTM phishing, and device-code abuse.
6