# Microsoft 365 token-replay campaign compromises 97 accounts at 79 organizations

Attackers used token-replay techniques to hijack 97 Microsoft 365 accounts spread across 79 organizations, according to a report by The Hacker News. The method involves reusing stolen authentication tokens to bypass credential and password defenses, letting intruders access email and cloud data without a password. It matters because stolen session tokens sidestep multi-factor authentication, a cornerstone of cloud security for large enterprises.

**Importance:** 3/5

## Sources

### Security
- [The Hacker News](https://thehackernews.com/2026/10/microsoft-365-token-replay-attacks.html) — Mon, 26 Oct 2026 14:05:51 +0530