Microsoft 365 Token Replay Compromises 97 Accounts — SkimNews
Get the Tech newsletter
Daily tech — startups, AI labs, chips, the launches that shape the next decade. Free.
- Microsoft 365 was hit by a token-replay campaign that compromised 97 accounts across 79 organizations.
- Huntress observed the activity, which leveraged an adversary-in-the-middle relay to capture sign-in sessions; attackers then replayed the stolen tokens to break into email accounts.
Why it matters: The concrete exposure is broad: 97 Microsoft 365 accounts across 79 organizations were compromised through the campaign’s capture-and-replay sequence. For affected account holders, the practical consequence was email-account compromise, while researchers identified one shared technical method spanning dozens of organizations.
Ask SkimNews
