https://blog.it-learn.io/tags/aitm/Recent content in Aitm on it-learn.io | IT, Networking & Cybersecurity BlogHugoen-usWed, 28 Oct 2026 00:00:00 +0000https://blog.it-learn.io/identity/2026-10-28-identity-m365-token-replay-hits-79-orgs-mfa-bypassed/Wed, 28 Oct 2026 00:00:00 +0000it-learn.iohttps://blog.it-learn.io/identity/2026-10-28-identity-m365-token-replay-hits-79-orgs-mfa-bypassed/A two-month adversary-in-the-middle campaign replayed stolen session tokens to breach 97 Microsoft 365 accounts across 79 organizations - MFA present on every one. Plus: CVE-2026-80097 let zero-permission Android apps steal work tokens from Microsoft Authenticator, and the Gheist campaign uses stolen GitHub API tokens to harvest secrets from private repos and enterprise environments.