Tag: token replay attacks

Microsoft 365 Token-Replay Attacks Compromise 97 Accounts

In a massive token-replay attack campaign, hackers exploited a vulnerability in Microsoft 365 to compromise 97 accounts across 79 organizations, using a clever trick to bypass even multi-factor authentication. By capturing and replaying access tokens, the attackers gained unauthorized access to sensitive data, highlighting a new level of sophistication in cyber threats.