An attacker who spent ten weeks replaying stolen Microsoft 365 sign-in sessions broke into email accounts at 79 organizations and used hidden inbox rules to keep victims from …
First seen on helpnetsecurity.com
Jump to article: www.helpnetsecurity.com/2026/10/23/microsoft-365-accounts-stolen-sessions/
![]()

