Oct 142025 Microsoft Warns of ‘Payroll Pirates’ Hijacking HR SaaS Accounts to Steal Employee Salaries Storm-2657 exploits phishing and weak MFA to hijack HR SaaS accounts and redirect payroll funds.