> TritonInfoSec News
Home / Oct 26, 2026 / Story
0
#3 The Hacker News general October 26, 2026 at 08:35 UTC

Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations

By [email protected] (The Hacker News)

AI Summary

Huntress researchers documented an adversary-in-the-middle token-replay campaign against Microsoft 365 that ran from July 14 to September 22, 2026, capturing sign-in sessions and replaying stolen tokens to compromise 97 accounts across 79 organizations, with 497 successful sign-in events detected. This campaign demonstrates that MFA alone does not protect against AitM token theft, reinforcing the need for conditional access policies and session anomaly detection.

Read full article → https://thehackernews.com/2026/10/microsoft-365-to…

Relevance score: 88.0/100

# More from October 26

  1. 1
    PHP2Shell Exploitation Hits Government Entity Amid Global Scanning and Signs of AI-Assisted Hacking The Hacker News
  2. 2
    PHP2Shell security flaws now sucessfully exploited in the wild BleepingComputer
  3. 4
    BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot BleepingComputer
  4. 5
    Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages SecurityWeek
  5. 6
    Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions Logs The Hacker News
  6. 7
    Popular AI tool LiteLLM says unrevoked key allowed hackers to target users The Record
  7. 8
    Bias in Qwen3-Coder Model Schneier on Security
  8. 9
    Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware The Hacker News
  9. 10
    Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers The Hacker News