consent attack

July 5, 2026 · 12 min read

The 3-second Microsoft 365 hijack nobody saw coming, and what to do if your staff already clicked

A new phishing technique steals Microsoft 365 sessions in about 3 seconds flat, no password required. If someone in your office clicked something weird today, here is what to check tonight.