Passkey-themed phishing attacks lead to Microsoft 365 data theft

Cybersecurity brief from BleepingComputer.

From the source

Microsoft says threat actors linked to ShinyHunters, Helix, and other extortion gangs are using passkey and single sign-on-themed social engineering attacks to compromise corporate Microsoft accounts and steal data from Microsoft 365 services. […]

Why it is on APerez.net

This belongs in the security stream because it can affect how systems are defended, operated, patched, monitored, or trusted. The source link below has the complete reporting and technical details.

This APerez.net Wire Brief is an automatically created digest from an RSS item. It does not republish the full source article.