You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
smart host vulnerabilities
About this tag
Discussions on smart host vulnerabilities at WindowsForum.com focus on the exploitation of Microsoft 365's Direct Send feature, which allows internal devices to send emails without authentication. A sophisticated phishing campaign since May 2025 has targeted over 70 organizations in the United States, highlighting how misconfigured smart host settings can be abused by attackers. The content emphasizes the need for organizations to reassess email security configurations to prevent such exploits. This tag covers real-world threats and mitigation strategies related to smart host vulnerabilities in Microsoft 365 environments.
A sophisticated phishing campaign has been exploiting Microsoft 365's Direct Send feature, targeting over 70 organizations across various sectors in the United States since May 2025. This attack underscores the evolving tactics of cybercriminals and highlights the need for organizations to...