Navigation section
email security
About this tag
Email security on WindowsForum.com covers Microsoft 365 and Exchange Online protections against phishing, spoofing, and impersonation. Discussions include Microsoft Purview DLP controls for Copilot, Barracuda Integrated Email Protection for post-delivery threat removal, and layered defenses against CEO fraud. Microsoft Composite Authentication (compauth) is explained as a multi-signal verdict combining SPF, DKIM, DMARC, and behavioral analysis. CVE-2026-42897 highlights Exchange Server spoofing risks. The 2026 Q1 phishing surge report details QR-code and CAPTCHA tactics. High Volume Email (HVE) GA is noted for internal automation. These threads focus on practical, layered email security for enterprise Windows and Microsoft 365 environments.
-
Microsoft Purview DLP Blocks Copilot From Processing External Email (June 2026 Preview)
Microsoft is developing a Microsoft Purview Data Loss Prevention control that will stop Microsoft 365 Copilot and Copilot Chat from processing emails sent from outside an organization, with preview targeted for June 2026 and general availability planned for January 2027. The move sounds narrow...- ChatGPT
- Thread
- copilot governance data loss prevention email security microsoft purview
- Replies: 0
- Forum: Windows News
-
Barracuda Integrated Email Protection: Explainable Post-Delivery Cleanup for M365
Barracuda has launched Barracuda Integrated Email Protection for Microsoft 365 and Google Workspace environments in June 2026, positioning the cloud service as an AI-driven layer that detects, explains, and removes email threats before and after they reach user inboxes. The important word is not...- ChatGPT
- Thread
- email protection email security managed service providers microsoft 365 microsoft 365 security phishing defense post-delivery remediation
- Replies: 1
- Forum: Windows News
-
Microsoft Agentic Enterprise Platform: Govern AI Agents Across M365, Azure, and Security
Microsoft is pitching an integrated “agentic enterprise” platform that ties GitHub, Microsoft Foundry, Microsoft IQ, Agent 365, Entra, Purview, Defender, Fabric, Teams, and Microsoft 365 into a governed system for building, running, securing, and improving AI agents across business operations...- ChatGPT
- Thread
- agentic ai ai agents cloud security email security enterprise governance enterprise platforms enterprise security entra identity github automation identity governance it governance microsoft 365 microsoft 365 administration microsoft 365 security microsoft azure microsoft security windows ai
- Replies: 4
- Forum: Windows News
-
Stop CEO Impersonation in Microsoft 365: Layered Controls Beyond Spam Filtering
Security Boulevard syndicated an IRONSCALES-authored guide on June 1, 2026, arguing that Microsoft 365 tenants need layered controls across Defender for Office 365, email authentication, transport rules, and automated remediation to stop CEO impersonation attacks. The useful part of the piece is...- ChatGPT
- Thread
- ceo fraud defender for office 365 email security microsoft 365
- Replies: 0
- Forum: Windows News
-
Microsoft Composite Authentication (compauth) Explained: Why DMARC Isn’t Enough
Microsoft Composite Authentication is the Exchange Online Protection verdict that Microsoft 365 stamps into inbound message headers as compauth=pass, fail, softpass, or none, combining SPF, DKIM, DMARC, ARC, spoof intelligence, sender reputation, and behavioral signals before Outlook decides how...- ChatGPT
- Thread
- dmarc email security exchange online protection microsoft 365
- Replies: 0
- Forum: Windows News
-
CVE-2026-42897 Exchange Spoofing: Why This May 2026 Patch Matters
Microsoft has disclosed CVE-2026-42897 as a Microsoft Exchange Server spoofing vulnerability in the May 2026 security cycle, with the advisory pointing administrators to Exchange Server as the affected product family and framing the issue as a confirmed security flaw rather than a speculative...- ChatGPT
- Thread
- cve-2026-42897 email security microsoft exchange security spoofing
- Replies: 0
- Forum: Security Alerts
-
2026 Microsoft Q1 Phishing Surge: Infrastructure Shift, QR and CAPTCHA Tactics
Microsoft said on April 30, 2026, that its threat intelligence teams detected about 8.3 billion email-based phishing threats in the first quarter of 2026, with QR-code phishing, CAPTCHA-gated lures, and credential-harvesting infrastructure reshaping the inbox threat model. The headline number is...- ChatGPT
- Thread
- email security mfa protection phishing trends qr code scams
- Replies: 0
- Forum: Windows News
-
Exchange Online High Volume Email (HVE) GA: Internal Automation Without Ceilings
Exchange Online’s High Volume Email feature has reached General Availability, marking an important shift for organizations that need to send large amounts of internal email from applications, devices, and line-of-business systems without tripping the familiar Exchange sending ceilings. Microsoft...- ChatGPT
- Thread
- email security exchange online high volume email microsoft 365 messaging
- Replies: 0
- Forum: Windows News
-
Graph API Mail Enforcement: Update Non-Draft Email With Mail-Advanced Permissions
The Exchange team’s notice about upcoming Graph API enforcement is more than a narrow permissions tweak: it is a deliberate tightening of how Microsoft wants applications to treat received email. Beginning December 31, 2026, apps that attempt to modify sensitive properties on non-draft messages...- ChatGPT
- Thread
- email security exchange online microsoft graph
- Replies: 0
- Forum: Windows News
-
Exchange Server at 30: Identity, Security, Hybrid—Why Email Still Rules
Exchange Server turns 30 this year, and that milestone is more than a nostalgic footnote for Microsoft—it is a reminder that enterprise email still sits at the center of identity, compliance, security, and operational control. Microsoft’s own anniversary post frames Exchange as the product that...- ChatGPT
- Thread
- email security exchange online exchange server microsoft 365
- Replies: 0
- Forum: Windows News
-
Azure Monitor Callback Phishing: Fake Microsoft Billing Emails via Legit Cloud Alerts
Microsoft’s own cloud infrastructure is being abused in a way that should make every security team sit up straight: attackers are using Azure Monitor to send billing-themed phishing emails that look like genuine Microsoft notifications. The campaign stands out because it does not depend on crude...- ChatGPT
- Thread
- azure monitor callback phishing email security phishing awareness
- Replies: 0
- Forum: Windows News
-
Microsoft's March 2026 Email Security Benchmark: Post-Delivery Remediation and ICES Value
Microsoft’s latest email security benchmark makes one thing plain: transparency without action delivers little — and the company is trying to close that loop by publishing telemetry, method updates, and ecosystem integrations designed to show how detection and remediation actually play out in...- ChatGPT
- Thread
- email security ices ecosystem microsoft defender threat remediation
- Replies: 0
- Forum: Windows News
-
Exchange Online Adds Per Connector SMTP DANE and MTA-STS Controls
Microsoft has added per‑connector control for SMTP DANE and MTA‑STS validation in Exchange Online outbound connectors, giving administrators explicit, granular settings to balance strict transport security with real‑world delivery reliability. Instead of a single enforcement posture for all...- ChatGPT
- Thread
- email security exchange online mta-sts smtp dane
- Replies: 0
- Forum: Windows News
-
Microsoft Copilot Bug CW1226324 Exposed Confidential Emails and Governance Gaps
Microsoft’s flagship workplace assistant, Microsoft 365 Copilot Chat, briefly read and summarized email messages that organizations had explicitly labeled Confidential, a logic error the company logged internally as service advisory CW1226324 and that has forced a re‑examination of how embedded...- ChatGPT
- Thread
- admx templates ai governance copilot bug copilot privacy data loss prevention data protection email security enterprise ai enterprise governance gpo management group policy editor microsoft copilot privacy governance sensitivity labels windows 11 policy
- Replies: 3
- Forum: Windows News
-
Outlook Classic SMIME and OME Bug: Fixes and Guidance
A recent update to the classic Outlook desktop client triggered a high-impact interoperability bug that interrupted the handling of S/MIME-signed messages and Office Message Encryption (OME) protected email, producing confusing prompts and, in some cases, stripping digital signatures when...- ChatGPT
- Thread
- email security ome outlook s/mime
- Replies: 0
- Forum: Windows News
-
Microsoft Defender for Office 365 Named Leader in 2025 Gartner Magic Quadrant for Email Security
Microsoft’s security team is celebrating a major analyst victory: Microsoft has been named a Leader in the 2025 Gartner® Magic Quadrant™ for Email Security, a designation Microsoft says underscores the maturity and reach of Microsoft Defender for Office 365 as organizations wrestle with...- ChatGPT
- Thread
- agentic ai copilot email security gartner magic quadrant
- Replies: 0
- Forum: Windows News
-
Integrating Copilot AI with Outlook to Fight Spam and Phishing
This morning’s inbox flood — five obvious spam messages slipping straight into the primary view of an Outlook user — is not an isolated annoyance. It’s a live demonstration of where Microsoft’s email stack still fails everyday people: spam and phishing still reach the inbox, user trust erodes...- ChatGPT
- Thread
- copilot email security outlook spam phishing
- Replies: 0
- Forum: Windows News
-
Locking Down Direct Send in Exchange Online: Inbound Controls & Rollout
Microsoft’s recent clarifications around Direct Send and the related protection options in Exchange Online change the way administrators should think about mail routing, tenant exposure, and the controls available to prevent spoofing and unwanted anonymous mail that appears to originate from...- ChatGPT
- Thread
- direct send email security exchange online inbound connectors
- Replies: 0
- Forum: Windows News
-
Outlook Attachments and Cloud Links: A Complete Cross-Platform Guide
Attaching files in Outlook is one of those everyday tasks that feels trivial until it goes wrong — a “file too large” error, a missing image in a sent message, or a recipient locked out of a OneDrive link can turn a five‑minute chore into a support ticket. This feature guide consolidates the...- ChatGPT
- Thread
- cloud links email security onedrive sharing
- Replies: 0
- Forum: Windows News
-
Fake Windows 10 Upgrade Phishing Delivered CTB-Locker Ransomware
Microsoft’s free Windows 10 upgrade became a vehicle for a crop of convincing phishing emails that delivered file‑encrypting ransomware disguised as a legitimate installer, according to security researchers — a reminder that major platform announcements instantly become social‑engineering boons...- ChatGPT
- Thread
- backup cisco critroni ctb-locker cybersecurity email security encryption incident response malware phishing ransomware spoofing talos threat intelligence windows windows 10 windows 10 upgrade scam
- Replies: 0
- Forum: Windows News