Cyber security Passkey phishing hijacks Microsoft 365 for data theft Passkey-themed phishing is hijacking Microsoft 365 accounts through vishing calls. Attackers steal session tokens and exfiltrate data over days, not minutes. Lars Cornelissen · Sep 13, 2026