authentication

Microsoft 365 Token Replay Attack Compromises 79 Organizations

An attacker replayed stolen Microsoft 365 tokens to breach 79 organizations between July 14 and September 22, 2026, without using passwords.