Azure CLI Password Spray Attack Exposes Microsoft 365 MFA Gap

Attackers used Azure CLI and ROPC to expose Microsoft 365 MFA gaps, showing why admins need tighter Conditional Access and ...

Microsoft 365 users fall victim to one-in-a-million password spray attack

The attack exploited previously exposed credentials and flaws in enterprises’ multi-factor authentication configurations.

81 million login attempts hit Microsoft 365 accounts as hackers force entry with stolen credentials

The attack abused misconfigured conditional access policies to bypass multi-factor authentication protections.
GovInfoSecurity

Azure Password-Spraying Attack Bypasses MFA Defenses

Attackers behind a password-spraying campaign targeting Microsoft Office 365 accounts have amassed dozens of victims by abusing a deprecated feature in OAuth 2.0 to ...

Hackers target Microsoft 365 accounts with 81 million login attempts

An aggressive password-spraying campaign targeting Microsoft 365 environments generated more than 81 million login attempts over a two-week period.