Hackers Compromise Microsoft 365 Accounts at 79 Organizations Using Stolen Session Tokens
Hackers compromised Microsoft 365 accounts at 79 organizations by stealing and replaying authentication tokens, according to Huntress. The campaign involved phishing, unauthorized device registrations, MFA changes, and malicious inbox rules. Discover how the attackers operated and which security measures can help organizations prevent account takeovers.