phishing attacks

The phishing attacks tag covers incidents and reporting on how attackers exploit trust across Microsoft and consumer services. Recent coverage examines a phishing email that exposed a Microsoft 365 mailbox containing business and potentially export-controlled material, without confirmed data exfiltration. It also follows the disruption of the Tycoon2FA phishing-as-a-service operation and the rise of Microsoft Teams vishing, attachments, trusted cloud services, and identity-based tactics. Other reporting looks at campaigns targeting Signal backup recovery keys and the broader security risks surrounding aging Windows systems and online convenience. Together, these articles focus on impersonation, credential and mailbox access, evolving delivery methods, and the expanding attack surface facing organizations and users.