// Microsoft 365HIGH
Mirage2FA, a phishing kit, has been actively stealing Microsoft 365 sessions from thousands of organizations. The campaign successfully bypasses multifactor authentication, enabling account takeover. Attackers have conducted reconnaissance across affected environments.
- Microsoft, Security & AI Updates | August 31, 2026(opens in a new tab)
- Hackers Target US and EU Firms With Microsoft 365 Session Hijack(opens in a new tab)
// Get alerts for Microsoft 365