Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data

Microsoft has disclosed campaigns where threat actors utilize passkey-themed social engineering to compromise cloud environments and exfiltrate data. The attacks leverage third-party email infrastructure to distribute malicious lures, highlighting how adversaries are adapting tactics to target modern passwordless authentication mechanisms.