Cybercriminals Exploit Passkey and SSO Trust in Phishing Campaigns Targeting Microsoft 365

Microsoft warns of coordinated phishing campaigns by groups including ShinyHunters and Helix that abuse trust in modern authentication methods. Threat…

Strengthen security awareness training across your organization, emphasizing verification of authentication requests—even for modern methods. Deploy additional multifactor authentication layers beyond passkeys, audit Microsoft 365 access logs for anomalous activity, and configure alerts for logins from unusual locations.