Entra ID

Microsoft traces passkey-themed lures to persistent Microsoft 365 cloud compromise

Microsoft says attackers are using passkey and SSO update pretexts to capture sessions, add MFA methods and collect Microsoft 365 data.