81 million login attempts hit Microsoft 365 accounts as hackers force entry with stolen credentials

The attack abused misconfigured conditional access policies to bypass multi-factor authentication protections.

Hackers Hit Microsoft 365 With 81 Million Login Attempts, Exploiting Azure CLI MFA Loophole

Hackers launched 81 million login attempts against Microsoft 365, exploiting Azure CLI and MFA configuration gaps to ...
Security Boulevard

Massive Password Spray Campaign Targets Azure CLI

What happened A massive password spray campaign is targeting Microsoft 365 environments through Azure CLI authentication. Huntress warned that threat actors made more than 81 million login attempts ...
GovInfoSecurity

Azure Password-Spraying Attack Bypasses MFA Defenses

Attackers behind a password-spraying campaign targeting Microsoft Office 365 accounts have amassed dozens of victims by abusing a deprecated feature in OAuth 2.0 to ...

FBI warns Microsoft users of Kali365 scam duping thousands: How the scam works and how users can protect themselves

The FBI has issued a warning about Kali365, a new Phishing-as-a-Service platform enabling attackers to steal Microsoft 365 ...
Virtualization Review

Mastering Conditional Access -- Unleashing Advanced Capabilities for Secure Cloud Access

Learn how Conditional Access policies can go beyond basic MFA to enforce phishing-resistant authentication, device compliance, session controls and risk-based access. Work through guided hands-on ...
Virtualization Review

Expert Explains Conditional Access and Zero Trust Implementation in Microsoft Entra

At today's online summit hosted by RedmondMag, titled "Cloud Control: Securing Access and Identity in the Microsoft SaaS Stack," longtime Microsoft MVP and Principal Cloud Architect Joey D'Antoni ...