Microsoft says threat actors linked to ShinyHunters, Helix, and other extortion gangs are using passkey and single sign-on-themed social engineering attacks to compromise corporate Microsoft accounts and steal data from Microsoft 365 services. [...]
Passkey-themed phishing attacks lead to Microsoft 365 data theft
Summary + source link. No paywalls, no tracking.