SPIN Unprocessed October 26, 2026 ai_technology cybersecurity
Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations
View original on thehackernews.comOverview
Cybersecurity researchers have disclosed a Microsoft 365 campaign that has been observed leveraging an adversary-in-the-middle (AitM) relay to capture sign-in sessions and then replay the stolen tokens to break into email accounts at 79 organizations. Huntress, which observed the activity between July 14 and September 22, 2026, said it detected 497 successful Microsoft 365 sign-in events across
SpinGraph analysis pending — check back after processing.
Ask AI about this story
Opens with the SpinGraph .md URL and structured context — one click, prompt included.
More from The Hacker News
View all →- Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape Sandboxes
- ⚡ Weekly Recap: This2Shell, That2Shell, Everything's an RCE? Rogue AI, Supply Chain Chaos and More
- Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware
- PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw
- Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware
- Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions Logs
Markdown (.md) · JSON-LD schema (.json) · Machine-readable for AI & GEO