Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data

Microsoft has disclosed details of two campaigns in which threat actors are abusing third-party email delivery infrastructure to blast financial fraud scam messages and using passkey-themed social engineering to breach cloud environments. The first campaign, per the tech giant, involved sending over a million scam emails between August 3 and 5, 2026, by masquerading as chief executive officers

Lars Khan

1h ago

2 0

Discussion

Jump in and comment!

Get the ball rolling with your comment!

No comments yet.

Be the first to share your take and keep the conversation moving.

Join the conversation

UPVOTERS

Community appreciation

See who found this content valuable and showed their support.

McR

Noor Bakker

TOPICS

Explore the same topics

Discover more content from the topics this post is mapped to.

bleepingcomputer.com

Dutch NCSC: Critical Check Point VPN flaws exploitation is immi…

The Dutch Nationaal Cyber Security Centrum (NCSC) is warning of imminent exploitation of two critical flaws in Check Point VPN tracked as CVE-2026-85102 and CV…

Marcus Allen

15h ago

thehackernews.com

CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and …

The U. S. Cybersecurity and Infrastructure Security Agency (CISA) has added five security flaws impacting JFrog Artifactory, ConnectWise ScreenConnect, and Mik…

The Hacker News

16h ago

thehackernews.com

When the Whole Company Adopts AI: What It Does to Your SOC

Over the past year, we watched a new class of alert appear in enterprise security operations centers and grow faster than anything else in the stream: alerts t…

The Hacker News

23h ago

thehackernews.com

GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Di…

GitLab has released patches to address multiple flaws, including a maximum-severity security vulnerability that has witnessed in-the-wild probes within hours o…

The Hacker News

1d ago

bleepingcomputer.com

Hackers abused Claude to extract secrets from 1.8M Android apps

Anthropic says multiple threat groups, including the financially motivated and state-sponsored espionage groups linked to Russia and China, tried to abuse its…

Noor Bakker

1d ago

darkreading.com

Threat Actor Generates 1M Personalized Fraud Emails in 3 Days

Cybercriminals behind malicious email campaigns no longer have to compromise volume for credibility, or vice versa, thanks to AI.

Dark Reading

1d ago

Keep browsing

Explore more from this topic

Dive into the full feed of curated posts covering Cybersecurity & Data Protection.

Browse Topics

Continue exploring

Discover more content that aligns with your interests and this post.

thehackernews.com

CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and …

The U. S. Cybersecurity and Infrastructure Security Agency (CISA) has added five security flaws impacting JFrog Artifactory, ConnectWise ScreenConnect, and Mik…

The Hacker News

16h ago

thehackernews.com

When the Whole Company Adopts AI: What It Does to Your SOC

Over the past year, we watched a new class of alert appear in enterprise security operations centers and grow faster than anything else in the stream: alerts t…

The Hacker News

23h ago

thehackernews.com

GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Di…

GitLab has released patches to address multiple flaws, including a maximum-severity security vulnerability that has witnessed in-the-wild probes within hours o…

The Hacker News

1d ago

thehackernews.com

ThreatsDay: 200 Android Flaws, Browser-Built Phishing, 119K Sca…

A lot of this week’s security news has the same awkward answer to one question: “Why was that allowed to work?” An extension asks for access and takes too muc…

jordan af

2d ago

thehackernews.com

Google Play Early Access Abused to Push Thousands of Deceptive …

Bad actors are misusing Google Play's Early Access program to push deceptive apps that claim to offer money, rewards, casino winnings, and premium content. Ea…

The Hacker News

2d ago