A cybersecurity effort is taking advantage of weaknesses in Microsoft 365, letting attackers pretend to be users in 79 organizations.

MSFT · Microsoft Corporation

The AI's read

This raises doubts about Microsoft's identity protections and could prompt extra security work. The report describes a specific campaign, not wider harm across Microsoft's customers, and gives no financial-loss figure. Still, attackers bypassed multi-factor authentication and reused stolen sessions, making this a company-specific security concern.