← Incidents
INCIDENT 487IntrusionLOW / UNDER REVIEWSourced
Passkey-themed social engineering leads to identity and cloud compromise
Passkey-themed social engineering is being used to compromise identities and enable broader cloud attacks. Learn how threat actors establish MFA persistence, abuse Microsoft Graph for reconnaissance, and access SharePoint, OneDrive, and email data, along with key detection and mitigation guidance. The post Passkey-themed social engineering leads to identity and cloud compromise appeared first on Microsoft Security Blog .
Last evidence update
09 SEP 2026 · 17:41 UTC
Source count
1
Status
reported
Observation history
How this record has evolved as evidence accumulated.
10 SEP · 05:22 UTC
Initial report
Evidence