Topic
token spraying
Latest news
- 26 OctToken-replay attacks hit Microsoft 365; 97 accounts compromised at 79 organisations
Security researchers at Huntress observed an adversary-in-the-middle campaign between July 14 and September 22, 2026 that captured Microsoft 365 sign-in sessions and replayed tokens. The attackers made over 200,000 failed login attempts, achieved 497 successful sign-ins, compromised 97 accounts and registered 48 rogue Entra devices across 79 organisations.
Security · 1 source
Articles
No articles about token spraying yet.