Skip to content

Sam's News — email-security — 2026-09-13

Security

7.5 Microsoft cloud accounts hijacked through passkey phishing and email fraud

Microsoft disclosed that threat actors are using passkey-themed social engineering and third-party email infrastructure to breach cloud accounts and steal data.

  • Active since May 2026
  • Attacks begin with phone/message impersonation of IT helpdesk
  • Identity compromise enables cloud reconnaissance and data exfiltration
  • SharePoint, OneDrive, email collection via REST APIs
  • Proxy-associated infrastructure used for automated collection

Sources: The Hacker News RSS Update to: Passkey-themed social engineering enables identity and cloud compromise attacks