Authentication & MFA
FIDO2 passkeys block session token theft
Organizations are shifting to phishing-resistant passkeys as attackers use reverse proxies to steal session tokens and bypass traditional MFA in Microsoft 365 environments.
OAuth & token abuse
OAuth and token abuse involve attacks targeting authentication tokens and application permissions to bypass traditional password requirements. These methods allow unauthorized access to user accounts and corporate environments.
Understand the story
Follow this story through dated reporting and the underlying records. Evidence labels distinguish documented findings, attributed reporting, disputed accounts and claims that remain unverified. Start with the background reports below, then read the latest developments.