Microsoft 365 Token Replay Attacks Let Hackers Access Business Emails Without Passwords

Hackers accessed Microsoft 365 environments at 79 organizations by replaying stolen sign-in sessions, letting them enter business accounts without victims’ passwords. Huntress recorded 497 successful sign-ins and more than 200,000 failed attempts during the ten-week campaign, which ran from July 14 through September 22, 2026. Use of the provider’s... Weiterlesen: Microsoft 365 Token Replay Attacks Let Hackers Access Business Emails…