Hackers Use Fake Microsoft Entra Passkey Enrollment to Gain Microsoft 365 Access

AI Summary

Okta-tracked threat actor O-UNC-066 is conducting vishing campaigns targeting Microsoft 365 users, directing victims to fake Microsoft Entra ID login pages to hijack passkey enrollment and gain persistent account access for data extortion. Security teams should alert helpdesks and review Entra ID passkey enrollment logs for anomalous activity, particularly unsolicited enrollment events following inbound phone calls.

Read full article → https://thehackernews.com/2026/07/hackers-use-fake…

Relevance score: 78.0/100

# More from July 11

1
URGENT - Progress Tells ShareFile Customers to Shut Down Storage Zone Controllers Over Security Threat The Hacker News
2
Progress urges ShareFile admins to shut down servers over “credible” threat BleepingComputer
3
Exposed Hacker Server Reveals WP-SHELLSTORM Backdooring Thousands of WordPress Sites The Hacker News
4
Ransomware Negotiator Gets 70 Months in Prison for Aiding BlackCat Attacks The Hacker News
6
Hackers exploit critical auth bypass in Gitea Docker image BleepingComputer
7
Six New U-Boot Flaws Could Let Malicious Images Crash Devices or Run Code at Boot The Hacker News
8
Attackers Exploit 'Ill Bloom' Vulnerability to Drain $3.1 Million From Cryptocurrency Wallets The Hacker News
9
Study of 281 Free Android VPN Apps Finds Traffic Leaks, Unencrypted Data, and Tracking The Hacker News
10
Microsoft Patches Defender ‘RoguePlanet’ Vulnerability SecurityWeek