https://blog.it-learn.io/tags/phishing-resistant-mfa/Recent content in Phishing-Resistant-Mfa on it-learn.io | IT, Networking & Cybersecurity BlogHugoen-usMon, 26 Oct 2026 00:00:00 +0000https://blog.it-learn.io/identity/2026-10-26-identity-m365-token-replay-hits-79-orgs-mfa-bypassed/Mon, 26 Oct 2026 00:00:00 +0000it-learn.iohttps://blog.it-learn.io/identity/2026-10-26-identity-m365-token-replay-hits-79-orgs-mfa-bypassed/Token theft is the new credential theft. A July-September AitM campaign replayed M365 session tokens across 79 organizations, bypassing MFA entirely. Plus: Gheist exfiltrates secrets from private GitHub repos, an AI coding agent nearly installed malware from a planted instruction file, and a leaked LiteLLM master key compromised an entire release pipeline.