Threat actors are abusing misconfigured MX records and weak DMARC/SPF policies to make phishing emails look internal, ...

Microsoft has witnessed a surge in the use of this tactic since May 2025, as part of opportunistic campaigns targeting organizations across multiple industries and verticals.

New research reveals a simple way threat actors are using Microsoft 365 Direct Send to phish employees, without even having to steal credentials. Printers and scanners are increasingly becoming ways ...