Microsoft warns attackers are using passkey and MFA update requests to phish employees, hijack sessions, and access Microsoft 365 data.

The post Hackers Are Using Passkey Updates as a New Microsoft Phishing Hook appeared first on TechRepublic.

The FBI warned that Kali365 can hijack Microsoft 365 accounts by abusing device code authentication and capturing OAuth tokens.

The post FBI Warns: ‘Kali365’ Phishing Service Targets Microsoft 365 Accounts appeared first on TechRepublic.