VulnerabilityBleeping Computer
8.5 — CRITICAL
Password spraying attacks surge 155x as hackers exploit MFA gaps
Huntress observed a 155x increase in password spraying attacks in H1 2026, including a campaign that generated more than 81 million login attempts in two weeks. The attacks exploited legacy authentication and gaps in MFA policies that left some login flows unprotected. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
A password spraying campaign targeting Azure CLI users exploited gaps in multi-factor authentication (MFA) policies, resulting in over 81 million login attempts and 78 account compromises in a two-week window.
⚙️Technical Details
Affected Systems
Azure CLI
Attack Vectors
Resource Owner Password Credentials (ROPC)BYOIP (bring-your-own-IP) offeringIPv6 range 2a0a:d683::/32FranTech-hosted IPv6 ranges3xK Tech using IPv4
💥Impact Assessment
Severity: high
Who Is at Risk
organizations with weak or poorly configured MFA policiesbusinesses without MFA in placeSeverity: high
🛡️Recommended Actions
1Enforce password hygiene and consider passwordless options
2Disable ROPC (or apps that rely on it) from your system
3Require MFA for all users, all cloud apps, and all client app types, with no exclusions
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.