Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations
Cybersecurity researchers have disclosed a Microsoft 365 campaign that has been observed leveraging an adversary-in-the-middle (AitM) relay to capture sign-in sessions and then replay the stolen tokens to break into email accounts at 79 organizations. Huntress, which observed the activity between July 14 and September 22, 2026, said it detected 497 successful Microsoft 365 sign-in events across
检查你的信息是否已泄露
- Have I Been Pwned：免费查询你的邮箱地址是否出现在过去的泄露数据中（FBI 也提供泄露的密码）
- Google 密码检查：检查保存在 Google 中的密码是否泄露、重复使用或强度不足，并建议更改
| 来源 | The Hacker News |
|---|---|
| 获取时间 | 2026/10/26 18:23 |
| 数据 | Markdown JSON |
2026/10/26 17:35，The Hacker News 发布了“Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations”（类型：安全新闻）。