Passkey-themed phishing attacks lead to Microsoft 365 data theft

Threat actors linked to ShinyHunters and Helix are using social engineering attacks to compromise corporate Microsoft accounts and steal data from Microsoft 365 services by exploiting passkey and single sign-on vulnerabilities.