Hackers launched 81 million login attempts against Microsoft 365, exploiting Azure CLI and MFA configuration gaps to ...

Threat actors have made over 81 million login attempts in a massive password spray campaign targeting Azure CLI.

The attack abused misconfigured conditional access policies to bypass multi-factor authentication protections.

An aggressive password-spraying campaign targeting Microsoft 365 environments generated more than 81 million login attempts over a two-week period.

What happened A massive password spray campaign is targeting Microsoft 365 environments through Azure CLI authentication. Huntress warned that threat actors made more than 81 million login attempts ...