Entra Passkey Vishing Hijacks Microsoft 365 Access
A threat cluster is calling employees, walking them through what looks like a routine Microsoft passkey setup, and walking away with full access to their Microsoft 365 account - no password stolen, no
404-founders.com5 min read