Attackers exploit misconfigured email routing and weak spoof protections to send internal-looking phishing emails for ...

Threat actors are abusing misconfigured MX records and weak DMARC/SPF policies to make phishing emails look internal, ...

Threat actors abuse complex routing and misconfigured protections to spoof domains and send phishing emails that appear to be ...

Threat actors are exploiting complex routing scenarios and misconfigured spoof protections to send spoofed phishing emails, ...

Phishing scammers use rnicrosoft.com domain to impersonate Microsoft by replacing "m" with "rn" in typosquatting attacks that ...

Scammers routinely impersonate Microsoft online. New research breaks down how the brand is used in phishing and why it still works.

In 2026, Microsoft is once again in a top spot — but not on a list that the company would want to land on. Once again, the ...

Beware this highly sophisticated Microsoft 365 attack. Update, March 15, 2025: This story, originally published March 13, has been updated with further technical detail regarding the Microsoft 365 ...

Researchers from Check Point have discovered a new phishing campaign, abusing a legitimate Microsoft product in an attempt to steal people’s login credentials. In a new blog post, published earlier ...

Microsoft on Thursday filed 117 civil lawsuits against alleged phishers trying to scam Microsoft customers out of personal information such as credit card numbers. The lawsuits, filed in U.S. District ...

Monday morning, a phishing message containing a malicious attempt to steal credentials was sent to approximately 2,000 Miami accounts. This message came with the subject line, “Thank you for being ...