
81 Million Login Attempts Hit Microsoft 365 Accounts Over Two Weeks, 78 Breached
An aggressive password-spraying campaign flooded Microsoft 365 tenants with over 81 million authentication attempts between June 12 and 26, compromising 78 accounts across 64 organizations. Attackers exploited MFA gaps using the Azure CLI's ROPC OAuth flow.










