Microsoft Warns of Passkey Phishing Campaigns Targeting Cloud Accounts

Microsoft has disclosed details of two ongoing campaigns where threat actors are employing sophisticated passkey-themed social engineering tactics and abusing third-party email delivery infrastructure to breach Microsoft cloud environments. These attacks aim to hijack cloud accounts and exfiltrate sensitive data, highlighting an evolving threat landscape for cloud users.