A widespread cybersecurity campaign has leveraged adversary-in-the-middle (AitM) techniques to bypass multi-factor authentication and compromise nearly 100 Microsoft 365 accounts across 79 different organisations.
The EvilTokens phishing-as-a-service platform has demonstrated how AI is being used to automate the compromise of Microsoft 365 accounts, allowing attackers to move at high speeds.
ConnectWise has suspended several cloud services while investigating unauthorized access to client Microsoft 365 environments, which reportedly involved the misuse of application tokens.
An estimated 77% of global organisations experienced Microsoft 365 governance incidents over the past year, exacerbated by the rapid adoption of AI tools.
