security1 publisher
Microsoft traces four months of Graph-based mail theft to fake passkey helpdesk calls
Since May, intruders posing as IT have walked employees through a passkey update on their personal phones, then registered their own authentication method and pulled mail and files through Graph, SharePoint and Exchange APIs.
Publishers:microsoft.com
Reality
- Evidence62
- Adoption32
- Hype gap+12
- Incentives65
- Confidence58