A Microsoft 365 phishing operation targeting hundreds of organizations captured thousands of passwords and session cookies, ...