NewsThe Hacker News
Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations
More on Organizations
Other advisories
- Not ratedosv:CVE-2026-115933Forged signed tokens let any registered user take over other users and organizations
- Not ratedosv:CVE-2026-105213ZITADEL before 4.17.1 Authentication Bypass via Login V2 for Deactivated Organizations
- Not ratedosv:CVE-2026-104914MISP: Soft-Deleted Attributes from Other Organizations Exposed via Attribute Search and Paginated View
- Not ratedosv:CVE-2026-94455Unauthenticated /enterprise/create-user mints lifetime top-tier organizations and discloses their API key
- Not ratedosv:CLEANSTART-2026-FD75876Keycloak provides a way to manage identity providers and organizations through its administrative API
- MediumCVE-2026-18201Keycloak-services: keycloak-services: generic identity-provider creation can bind brokers to organizations without manage-organizations
- HighCVE-2026-75542OAuth token exchange grants repository scopes for organizations the principal cannot access
- Not ratedosv:CVE-2026-75542OAuth token exchange grants repository scopes for organizations the principal cannot access
Other news entries
- CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan TargetsNewsThe Hacker News
- The Huntress Tragic Quadrant: Ranking Threats Hitting Businesses HardestNewsBleepingComputer
- AI-Generated Fake Login Pages Are Making Account Takeovers EasierNewsThe Hacker News
- Lazarus Abuses South Korean Security Software to Deploy Malware Using Post-Quantum EncryptionNewsThe Hacker News
- The days of assuming another company’s breach is someone else’s problem are overNewsCSO Online
- Former pentester used ARTEX AI to steal 8.2 million data recordsNewsBleepingComputer
- Trust Is Not What It Seems — and Fraudsters Are Counting on ItNewsDark Reading
- BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing RevocationsNewsThe Hacker News
Source: https://thehackernews.com/2026/10/microsoft-365-token-replay-attacks.html
ID