Passkey-themed phishing attacks lead to Microsoft 365 data theft

Microsoft says threat actors linked to ShinyHunters, Helix, and other extortion gangs are using passkey and single sign-on-themed social engineering to compromise corporate Microsoft accounts and steal data from Microsoft 365 services. The attacks target organizations through deceptive authentication prompts.