#mfa
-
Microsoft 365 Token-Replay Campaign Hits 79 Organizations
Huntress detailed a campaign in which attackers captured sign-in sessions via an adversary-in-the-middle relay and replayed the stolen tokens, breaking into 97 accounts.
-
French Tax Data Theft: Weak Passwords and Seven Weeks Unnoticed
An attacker logged into France's tax administration with stolen staff passwords and siphoned data on hundreds of thousands of people and firms for nearly two months. ANSSI's verdict: the attack was not sophisticated — weak login protection and monitoring gaps did the rest.
-
Passkey-Themed Phishing: How Data Is Stolen from Microsoft 365
Microsoft is tracking a wave of attacks in which ransomware groups use the pretext of an “urgent passkey update” to coax access out of corporate accounts and methodically siphon data from the cloud.
-
BigBear 2.0: Phishing Service Bypassed MFA at 258 Organizations
The phishing-as-a-service platform BigBear 2.0 intercepted more than 5,000 Microsoft 365 credentials, bypassing multi-factor authentication with an adversary-in-the-middle attack.
-
Password-Spraying Attacks Surge 155-Fold Because of MFA Gaps
In the first half of 2026, Huntress recorded a 155-fold increase in password-spraying attacks. In just two weeks, one campaign generated over 81 million login attempts by exploiting legacy authentication and gaps in multi-factor protection policies.
-
Hacker Who Breached Snowflake Customers Pleads Guilty: At Least 100 Million People Affected
Connor Riley Moucka has pleaded guilty to fraud and identity theft over the 2024 breaches of Snowflake customer accounts. The key to every break-in was old passwords, stolen by infostealers and never changed.