// Alert

Microsoft 365 threat report

Active password spray campaign targeting Azure CLI is compromising Microsoft 365 user accounts. Between June 12-21, attackers made over 81 million login attempts originating from systems associated with LSHIY hosting provider, successfully compromising at least 78 user accounts across 64 organizations. Attackers rely on compromised password combo lists and are increasing credential spray attack volumes across Microsoft 365 environments.

// Get alerts for Microsoft 365