Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations

If you sign in to Microsoft 365 at work, your password is no longer the only thing standing between your inbox and an intruder. Attackers are stealing the digital proof of login that your device receives after you have already cleared the…