Microsoft warns hackers are exploiting password resets to gain access to user accounts – here’s how to stay safe | Daily Reports Online
Microsoft researchers warn Storm‑2949 is abusing the Self‑Service Password Reset flow to hijack accounts Attackers trick victims into approving MFA prompts via phone calls, then reset passwords and exfiltrate sensitive data The campaign targets Microsoft 365 and Azure environments, with Microsoft urging tighter RBAC controls and monitoring of high‑risk operations A hacking group known as…










