Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data
On September 9, 2026, Microsoft Security Research described a social engineering campaign that uses passkeys as a pretext to take over Microsoft 365 accounts. Observed since May 2026, it often starts with a phone...