A new social engineering campaign has been discovered in which attackers are using fake passkeys and IT support requests to gain access to Microsoft 365 accounts. Microsoft Threat Intelligence has tracked the activity since May 2026 and says several threat actors, including Storm-3121 and Storm-3032, use these initial-access methods. The company links Storm-3121 activity to ShinyHunters and Falcon extortion, while Storm-3032 represents actors that split from BlackFile and now operate under the
passkey (2)
Has your phone been prompting you for months to log into certain sites with a "passkey"? Security writer Kim Key of PC Mag explains why you might want to ditch your passwords in favor of passkeys.
JUANA SUMMERS, HOST: For months now, my phone has been nudging me to create passkeys. And every time it happens, I sort of pause because I don't actually know what a passkey is or whether it's something I actually need. I actually keep almost all of my passwords written down in the back of a secre
