Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations
Cybersecurity researchers have disclosed a Microsoft 365 campaign that has been observed leveraging an adversary-in-the-middle (AitM) relay to capture sign-in sessions and then replay the stolen tokens to break into ema…. This campaign highlights a significant vulnerability in authentication flows, where stolen session tokens can bypass multi-factor authentication and grant attackers persistent access to sensitive en…
Cybersecurity researchers have disclosed a Microsoft 365 campaign that has been observed leveraging an adversary-in-the-middle (AitM) relay to capture sign-in sessions and then replay the stolen tokens to break into ema…. This campaign highlights a significant vulnerability in authentication flows, where stolen session tokens can bypass multi-factor authentication and grant attackers persistent access to sensitive en…