Cybercriminals linked to several prominent data-extortion operations are exploiting confusion surrounding passkeys and single sign-on systems to compromise enterprise Microsoft accounts, establish persistent access and systematically steal sensitive information from cloud services.