security: Passkey-themed social engineering leads to identity and cloud compromise
Microsoft Security Blog
2026-09-09
Microsoft describes a threat campaign using passkey-themed social engineering to compromise identities and extend access into cloud services. The activity includes MFA persistence, Microsoft Graph reconnaissance, and access to SharePoint, OneDrive, and email data, with guidance on detection and mitigation.