Across 258 organizations, a criminal operation known as BigBear has demonstrated that the most sophisticated lock can be opened by a convincing voice on the telephone. By impersonating IT support and guiding corporate executives through fabricated security procedures, attackers are harvesting Microsoft 365 credentials and bypassing multi-factor authentication — the very safeguard designed to make stolen passwords meaningless. This campaign reminds us that trust, not technology, remains the most exploitable vulnerability in any organization, and that the human instinct to cooperate with authori