1 article on this topic.
Microsoft has disclosed two live campaigns hitting its cloud customers: a passkey-lure social-engineering wave that bypasses MFA to raid Microsoft 365, and an unrelated million-email CEO-fraud blast aimed at accounts-payable teams.