phishing

In a rapidly evolving digital landscape where email remains the single largest attack vector for organizations worldwide, the announcement of a strategic partnership between KnowBe4 and Microsoft marks a pivotal advancement in enterprise cybersecurity frameworks. At the intersection of cloud...

Sophisticated cybercriminals have recently demonstrated yet another way to exploit trust in internal communications—this time, by leveraging a Microsoft 365 feature originally intended for convenience. The Varonis Managed Data Detection and Response (MDDR) forensic team has uncovered a striking...

Hackers continue to evolve their tactics, and with sophisticated attacks targeting even the most mature enterprise technology stacks, the recent exploitation of Microsoft 365’s Direct Send feature underscores the persistent cat-and-mouse game between IT teams and cybercriminals. Direct Send, a...

Microsoft 365 has long positioned itself as a secure, enterprise-grade communication and productivity suite, trusted by thousands of organizations worldwide. Yet, as threat actors grow in sophistication, even the most well-intentioned features can be cleverly subverted to bypass traditional...

In a significant move to bolster email security, KnowBe4 and Microsoft have announced a strategic integration aimed at enhancing protection for organizations using Microsoft 365. This collaboration introduces KnowBe4 Defend, a solution designed to complement Microsoft's existing email security...

In recent months, a sophisticated phishing campaign has exploited Microsoft 365's Direct Send feature, targeting over 70 organizations across the United States. This attack method allows cybercriminals to impersonate internal users and deliver phishing emails that bypass traditional security...

In recent months, a sophisticated phishing campaign has exploited Microsoft 365's "Direct Send" feature, targeting over 70 organizations, primarily in the United States. This attack method allows cybercriminals to impersonate internal users and deliver phishing emails without compromising...

A sophisticated phishing campaign has been exploiting Microsoft 365's Direct Send feature, targeting over 70 organizations across various sectors in the United States since May 2025. This attack underscores the evolving tactics of cybercriminals and highlights the need for organizations to...

A new wave of phishing attacks has cast a harsh spotlight on the security assumptions underlying Microsoft 365, as cybercriminals adapt with alarming speed to exploit lesser-known features. Over the past two months, a sophisticated campaign has targeted more than 70 organizations across critical...

Here’s a summary of what’s known about CVE-2025-47963 (Microsoft Edge, Chromium-based, Spoofing Vulnerability): Nature of Vulnerability: This is a spoofing vulnerability in Microsoft Edge (Chromium-based). Successful exploitation allows an unauthorized attacker to perform spoofing attacks over...

The official Microsoft disclosure for CVE-2025-47964, a spoofing vulnerability in Microsoft Edge (Chromium-based), states that this vulnerability could allow an attacker to perform spoofing attacks via the browser. As is common for recent disclosures, Microsoft does not provide detailed...

The constantly evolving landscape of email-based cyber threats has long challenged organizations striving to protect sensitive business communications and safeguard end users. With social engineering, phishing, and advanced persistent threats now moving at a pace that strains even the most...

Microsoft 365 tenants across the United States have recently become the focal point of a sophisticated, widespread phishing campaign that leverages a rarely-discussed but highly impactful vulnerability in Exchange Online’s Direct Send feature. Security researchers have confirmed that, since May...

Here’s a summary of the news: KnowBe4 and Microsoft have announced a strategic integration aimed at boosting email security for organizations using Microsoft 365. This collaboration involves KnowBe4 Defend integrating with Microsoft Defender for Office 365, particularly its quarantine...

In the rapidly evolving digital landscape, email remains one of the most persistent attack surfaces for cybercriminals, and with attacks growing more sophisticated, enterprise reliance on powerful security platforms has become indispensable. Microsoft, a perennial leader in cloud-based...

Few security challenges expose both the evolving sophistication of cybercriminal tactics and the unintended weaknesses of enterprise cloud platforms as starkly as the recent abuse of Microsoft 365’s “Direct Send” feature. In a rapidly intensifying phishing campaign discovered in May 2025, threat...

In the constantly evolving landscape of cybersecurity, organizations battle daily against an onslaught of sophisticated email threats. Ransomware, business email compromise, phishing schemes, and a litany of other attack vectors continue to grow in prevalence and complexity, preying on both...

Four days of total digital silence. That was the stark reality for the 20 million users of YES24, South Korea’s largest online bookstore, after a catastrophic ransomware attack forced the entire platform—website and app—offline. Orders for books, reservations for concerts, and access to digital...

In the ever-evolving world of cyber threats, collaboration and integration between leading technology vendors have increasingly become not just beneficial, but essential. The recently announced strategic alliance between KnowBe4 – globally recognized for its comprehensive human risk management...

Here is a summary of the article "House Bans WhatsApp on Staff Devices Amid Threat" from WTMA-AM (published June 23, 2025): Context: Amid concerns about potential threats and as global tensions rise following U.S. strikes on three Iranian nuclear sites, the U.S. House of Representatives has...