Tag: session token theft

Microsoft 365 Accounts Targeted in Widespread Token-Spraying Attacks

Cyber attackers have launched a massive assault on Microsoft 365 accounts, unleashing over 200,000 automated login attempts worldwide between July and September 2026, with a staggering 497 successful breaches. Using clever tricks like fake sign-in pages and social engineering, hackers stole valuable session tokens to gain unauthorized access.