Threat+Constellation
Live— UTC
← Incidents
INCIDENT 487IntrusionLOW / UNDER REVIEWSourced

Passkey-themed social engineering leads to identity and cloud compromise

Passkey-themed social engineering is being used to compromise identities and enable broader cloud attacks. Learn how threat actors establish MFA persistence, abuse Microsoft Graph for reconnaissance, and access SharePoint, OneDrive, and email data, along with key detection and mitigation guidance. The post Passkey-themed social engineering leads to identity and cloud compromise appeared first on Microsoft Security Blog .

Last evidence update
09 SEP 2026 · 17:41 UTC
Source count
1
Status
reported
Observation history

How this record has evolved as evidence accumulated.

10 SEP · 05:22 UTC
Initial report
Evidence