Voice Callers Exploit BYOD to Reach Microsoft 365, Corporate Data

September 10, 2026 · Dark Reading · Severity: HIGH

This article describes how voice callers exploit BYOD policies to bypass security controls and access Microsoft 365 and corporate networks. By spoofing identity and manipulating help desks, attackers circumvent MFA and endpoint protections.

Key Takeaways

Voice callers are exploiting Bring Your Own Device policies to bypass security controls and reach Microsoft 365 and corporate networks.
Attackers use phone calls to spoof identity and trick help desks into granting access, effectively bypassing multi-factor authentication.
This method bypasses endpoint security controls that protect digital channels by targeting the human element in the authentication process.