Microsoft Entra

Extortion Gang Uses Vishing to Register Attacker-Controlled Entra Passkeys

Security firms say Microsoft's May passkey nudges have made the caller pretext more believable, allowing operators to enroll passkeys they control to reach Microsoft 365 data.