
In an alarming turn of events, a botnet comprising over 130,000 compromised devices has set its sights on Microsoft 365 accounts through a sophisticated attack strategy. Utilizing the password-spray method, the attackers have exploited a basic authentication feature, leveraging non-interactive sign-ins that are often overlooked by security teams. These sign-ins, performed by client applications or operating system components on behalf










