Token Replay Turns Stolen Microsoft 365 Sessions Into 97 Account Compromises Across 79 Organizations
RedSide Security October 26, 2026 Cybersecurity 2 views
An adversary-in-the-middle relay captured Microsoft 365 sign-in sessions and replayed stolen tokens to breach 97 accounts across 79 organizations, highlighting why session cookies — not passwords — are now the primary target.
phishing
business email compromise
identity security
Microsoft 365
token replay
adversary-in-the-middle
session hijacking
Continue reading: Token Replay Turns Stolen Microsoft 365 Sessions I…
