> TritonInfoSec News
Home / Sep 14, 2026 / Story
0
#1 The Hacker News general September 13, 2026 at 10:11 UTC

Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data

By [email protected] (The Hacker News)

AI Summary

Microsoft disclosed two active threat campaigns: one involving over one million scam emails sent between August 3–5, 2026, with attackers impersonating CEOs via third-party email infrastructure, and a second using passkey-themed social engineering to breach Microsoft cloud environments and exfiltrate data. Security practitioners should review cloud account protections and monitor for passkey-abuse phishing lures targeting enterprise tenants.

Read full article → https://thehackernews.com/2026/09/attackers-use-pa…

Relevance score: 82.0/100

# More from September 14

  1. 2
    CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV The Hacker News
  2. 3
    Dutch NCSC: Critical Check Point VPN flaws exploitation is imminent BleepingComputer
  3. 4
    BlueMoon Exploit Kit Chains Recent Chrome, Windows Zero-Days SecurityWeek
  4. 5
    Hackers exploit Tencent app flaw to deploy GrayRabbit malware BleepingComputer
  5. 6
    OpenAI Agents Linked to RubyGems Campaign That Gained RCE on RubyDoc Servers The Hacker News
  6. 7
    Thorough reorganization at NSA will create five 'mission centers,' including cyber and AI The Record
  7. 8
    When the Whole Company Adopts AI: What It Does to Your SOC The Hacker News
  8. 9
    Anthropic CEO Dario Amodei Says AI Industry Needs to Give Safety Measures Time to Catch Up SecurityWeek
  9. 10
    I fixed a tractor using John Deere’s self-repair service. Farmers aren’t sold on it. Ars Technica Security