In recent developments, cybersecurity firm East Security has identified a sophisticated phishing campaign that impersonates Microsoft's multi-factor authentication (MFA) processes. This attack leverages QR codes to deceive users into divulging their Microsoft 365 credentials, highlighting the...
The invisible war between cybercriminals and organizations has taken a dramatic turn as hackers’ phishing campaigns embrace increasingly sophisticated strategies, using PDFs to impersonate trusted brands like Microsoft and DocuSign. Between May and June 2025, researchers from Cisco Talos...
In May 2025, cybersecurity researchers at Varonis Threat Labs uncovered a sophisticated phishing campaign exploiting Microsoft 365's Direct Send feature. This attack has targeted over 70 organizations, with 95% based in the United States, across sectors such as financial services, manufacturing...
For many organizations, the expectation is that internal communications on their Microsoft 365 tenants are inherently more trustworthy—after all, who would question an authentication-free email from the company’s own domain? Yet a recent investigation by the Varonis Managed Data Detection and...
A sophisticated phishing campaign has been exploiting Microsoft 365's Direct Send feature, targeting over 70 organizations across various sectors in the United States since May 2025. This attack underscores the evolving tactics of cybercriminals and highlights the need for organizations to...
Few security challenges expose both the evolving sophistication of cybercriminal tactics and the unintended weaknesses of enterprise cloud platforms as starkly as the recent abuse of Microsoft 365’s “Direct Send” feature. In a rapidly intensifying phishing campaign discovered in May 2025, threat...
The rapid evolution of cybercrime has brought forth a new era of sophisticated phishing operations, with attackers now leveraging complex “Phishing-as-a-Service” (PhaaS) platforms to target lucrative enterprise networks. One such operation, identified in research as Storm-1575 and more widely...
In the rapidly evolving digital landscape, Microsoft 365 has become a cornerstone for organizational productivity, offering a suite of tools that facilitate communication, collaboration, and data management. However, its widespread adoption has also made it a prime target for cyber threats...
The digital underworld has once again evolved its trickery, this time using a time-tested method—QR codes—to bypass modern email security and steal delicate Microsoft 365 credentials. Cybercriminals are now capitalizing on the ubiquity of QR codes, transforming an everyday tool into a weapon...
In the latest cybersecurity blind spot to be exposed, Microsoft Sway, a unique presentation tool within the Microsoft 365 ecosystem, has come under fire for being hijacked by cybercriminals to deliver sophisticated "quishing" attacks. But before you run to disable Sway from your organization's...
In the ever-evolving landscape of cybersecurity, one method of attack has been capturing headlines and drawing alarm bells for security professionals: QR code phishing. In a striking report, Microsoft has announced significant advancements in its Defender for Office 365 to combat this...