News
threat-intel Microsoft 365 Token Replay Attacks Let Hackers Access Business Emails Without Passwords - GBHackers cybersecurity Malicious Instagram Ads Can Infect Vulnerable iPhones Without Users Clicking Anything - CyberPress cybersecurity AI Agents Adapt Hacking Tools in Just 55 Seconds During ConnectWise Attack - CyberPress threat-intel Hackers Use Instagram Ads to Deploy Coruna and DarkSword Spyware on iPhones - GBHackers cybersecurity Anthropic’s Claude AI Bypasses Paywall to Access Georgia Voter Data Without Permission - CyberPress threat-intel Hackers Abuse ConnectWise Cloud Backup Credentials to Launch AI-Driven Microsoft 365 Attacks - GBHackers cybersecurity AI Agents Exploit Third-Party Software Flaws to Access Anthropic’s Internal Data - CyberPress cybersecurity PHP Releases Emergency Windows Updates to Fix Brotli Memory Corruption Vulnerability - CyberPress cybersecurity CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution - The Hacker News ai Anthropic’s Latest Claude Security Disclosure Will Make You Sympathize With Claude - Gizmodo - Anthropic - Claude AI cybersecurity Cybersecurity Issue Forces a Major New Mexico Hospital to Divert Patients and Close Clinics - SecurityWeek vulnerability Brotli2Shell: Frequently asked questions for Google Brotli decoder vulnerability (CVE-2026-111497) - Tenable Security Research cybersecurity So Many AI Security Benchmarks, But None Tell the Whole Story - Dark Reading cybersecurity Apple Patches for October 2026, (Mon, Oct 26th) - SANS Internet Storm Center eu-regulation OJ:L_202602374: Council Regulation (EU) 2026/2374 of 26 October 2026 amending Regulation (EC) No 1183/2005 concerning restrictive measures in view of the situation in the Democratic Republic of the Congo - EUR-Lex - Official EU Journal
1 / 15
All news ›
Threat Intel

Microsoft 365 Token Replay Attacks Let Hackers Access Business Emails Without Passwords

GBHackers ·

Hackers accessed Microsoft 365 environments at 79 organizations by replaying stolen sign-in sessions, letting them enter business accounts without victims’ passwords. Huntress recorded 497 successful sign-ins and more than 200,000 failed attempts during the ten-week campaign, which ran from July 14 through September 22, 2026. Use of the provider’s network does not establish its involvement […] The post Microsoft 365 Token Replay Attacks Let Hackers Access Business Emails Without Passwords appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .

Continue on GBHackers ↗ ‹ All news Get the newsletter

The summary and image come from GBHackers; the image is shown from their website.