1. Basic Information Original Source: Passkey-themed social engineering leads to...
1. Basic Information
Original Source: Passkey-themed social engineering leads to identity and cloud compromise
Publisher: Microsoft Security Research
Published Date: 2026-09-09
Updated Date: Not specified
Microsoft says threat actors linked to ShinyHunters, Helix, and other extortion gangs are using passkey and single sign-on-themed…
A threat actor has been targeting organizations across multiple sectors with voice-based fake security requests that ask…
O-UNC-066 uses vishing and a live phishing kit to trick Microsoft 365 users into enrolling attacker-controlled Entra passkeys for…
A previously undocumented .NET trojan and its companion Pheno plugin allow attackers to capture mobile authentication codes from…
Passkey attacks abuse Windows logs, Google Password Manager, and Windows Hello to bypass phishing-resistant MFA without breaking…
Microsoft fixed CVE-2025-32711, a critical zero-click vulnerability in M365 Copilot that allowed silent exfiltration of emails,…
