email security

A sophisticated phishing campaign exploiting trusted email security tools has rattled the cybersecurity landscape, exposing a dismally clever strategy that turns protective mechanisms into attack vectors. Between June and July 2025, researchers at Cloudflare uncovered an operation wherein...

Attackers have found a chillingly effective way to subvert defenses integrated into the heart of enterprise email security. According to new research from Cloudflare, threat actors are actively exploiting “link wrapping” services—offered by reputable vendors like Proofpoint and Intermedia—to...

Cybercriminals are once again redefining the threat landscape, this time by exploiting trusted email security mechanisms to compromise Microsoft 365 accounts. In a sophisticated new campaign, threat actors have weaponized link-wrapping services—previously considered pillars of safe email...

Cybercriminals have once again proven their adaptability by leveraging trusted technology—from cybersecurity companies themselves—to bypass email defenses and target Microsoft 365 users. In a revealing discovery, threat actors have been exploiting link-wrapping services from well-known vendors...

Leveraging trusted internal channels has long been a gold standard for cybercriminals seeking to evade organizational defenses, but a recent campaign uncovered by Proofpoint signals a new level of ingenuity in exploiting a familiar Microsoft 365 feature: Direct Send. This functionality, designed...

Threat actors are increasingly exploiting Microsoft 365’s Direct Send feature to conduct highly convincing internal phishing campaigns, eroding trust within organizations and challenging the efficacy of traditional security defenses. This emergent attack vector, recently highlighted by...

In the ever-evolving landscape of cybersecurity, email remains a primary vector for attacks such as phishing, malware, and business email compromise (BEC). To bolster defenses, organizations often deploy a combination of native security solutions and third-party tools. Microsoft Defender for...

Sophisticated cyber adversaries have shifted tactics in recent months, exploiting fake Microsoft OAuth applications in tandem with advanced phishing toolkits such as Tycoon and ODx to compromise Microsoft 365 accounts worldwide. These attacks, tracked by researchers and security vendors...

In a rapidly evolving cybersecurity landscape, defenders continually play catch-up as threat actors devise innovative ways to evade detection, exploit trust, and steal sensitive information. A recent revelation by cybersecurity researchers highlights a sophisticated phishing campaign targeting...

Microsoft's July 2025 updates to Microsoft 365 introduce a suite of enhancements aimed at improving collaboration, communication, and security across its applications. These updates reflect Microsoft's commitment to evolving its tools to meet the dynamic needs of modern workplaces. Microsoft...

Organizations increasingly face the challenge of distributing vital information to vast internal audiences, whether via automated alerts, system notifications, or large-scale transactional communications. For enterprise IT teams running on Microsoft 365, the recent introduction of Exchange...

In recent months, the aviation and transportation sectors have become prime targets for sophisticated phishing attacks, particularly those involving Business Email Compromise (BEC) schemes. Cybercriminals are exploiting executive email accounts to deceive customers and partners into transferring...

A recent report by Check Point Research has highlighted a significant surge in phishing scams globally, with Microsoft, Google, and Spotify emerging as the most impersonated brands between April and June 2025. This trend underscores the evolving tactics of cybercriminals who exploit the trust...

Email security remains a fundamental concern for organizations of all sizes, especially as the sophistication and volume of malicious attacks directed through email channels continue to grow. Solutions like Mimecast Email Security have held a prominent position in the market for years, offering...

The UK National Cyber Security Centre (NCSC) has formally attributed the 'Authentic Antics' malware attacks to APT28, also known as Fancy Bear, a threat actor linked to Russia's military intelligence service (GRU). This sophisticated malware campaign targets Microsoft 365 users, aiming to steal...

For years, organizations have wrestled with the challenge of understanding and optimizing their email security posture within enterprise environments. Email remains a top vector for both opportunistic and targeted attacks—phishing, business email compromise, and malware routinely slip through...

Microsoft’s recent move toward greater transparency in email security effectiveness offers a timely and much-needed step forward for organizations seeking to stay a step ahead of relentless and evolving cyber threats. Over the past decade, the threat landscape has shifted dramatically...

Attackers are upping their game in the world of phishing, combining the power of artificial intelligence and native cloud tools to build attacks that are nearly indistinguishable from legitimate IT workflows. The latest trend, “native phishing,” leverages trusted Microsoft 365 (M365)...

In an era where cyber threats are becoming increasingly sophisticated, Trustwave has introduced its Managed Phishing for Microsoft service, aiming to bolster the defenses of organizations utilizing Microsoft Office 365 and Defender for Office against phishing attacks. This service is designed to...

Receiving an email from Microsoft that demands payment to keep an unfamiliar account alive is a scenario that would set off alarm bells for even the most seasoned tech users. The moment a message arrives that combines phrases like "Action required," "make a purchase," and an apparent threat of...