Microsoft 365 Token Spraying Hit 79 Orgs Without a Password

The four tenants that took the most attack traffic in Huntress's latest Microsoft 365 investigation were the ones the attacker never got into. A single replay address collected 1,052 blocked sign-ins.