The Hacker News and others report Iran-linked actors running password-spraying waves against Microsoft 365 accounts across Israel and the UAE, alongside Pay2Key ransomware resurfacing with stronger evasion, highlighting identity-first intrusion paths during geopolitical crises.
Iran-linked actors targeted Microsoft 365 accounts in 3 attack waves in March 2026, hitting 300+ orgs in Israel and 25+ in the UAE.
They used password spraying via Tor/VPNs to access mailboxes.
At the same time, Pay2Key ransomware resurfaced with stronger evasion
This finding is one of many signals tracked across Cyber Security. The live feed updates every few hours with new authority voices, debates, and emerging ideas.
← Back to Cyber Security