microsoft 365 phishing

A newly reported phishing campaign is abusing legitimate Microsoft 365 Groups, Outlook calendar invitations, shared files, and cloud authentication workflows in 2026 to reach corporate users through trusted collaboration surfaces rather than traditional spoofed email, according to security...

Cybercriminals are increasingly abusing legitimate cloud services to make phishing attacks harder to spot, and the latest example involves Bubble.io, a popular no-code app builder now being used as a launchpad for Microsoft 365 credential theft. The core trick is simple but effective: build a...