Feed / Azure
highAzuresecurity advisoryms_security_blog · Sep 9, 2026
Passkey-themed social engineering leads to identity and cloud compromise
Threat actors are using passkey-themed social engineering to compromise identities and access cloud resources, highlighting the importance of MFA persistence and proper security practices.
“Passkey-themed social engineering is being used to compromise identities and enable broader cloud attacks. Learn how threat actors establish MFA persistence, abuse Microsoft Graph for reconnaissance, and access SharePoint, OneDrive, and email data, along with key detection and mitigation guidance. T”
View original article →Identity
authenticationmfa
Security
threat_protectionendpoint_securitycloud_securityidentity_security
Audience
adminsecurity_engineer
Environment
cloudon_premises
Classification confidence: 95%
Loading correlations…