AI Summary

A threat actor has been using voice-based tactics to deceive Microsoft 365 users into enrolling a new Entra passkey. This approach, known as vishing, involves fake security requests made over the phone. The goal of these requests is to trick users into providing sensitive information or taking actions that could compromise their security. The Entra passkey is a security feature designed to provide an additional layer of protection for Microsoft 365 users. The use of vishing tactics to target Microsoft 365 users highlights the ongoing threat of social engineering attacks in the cybersecurity landscape.

AI summaries can be wrong sometimes—always verify important details using the source article.