Email securityPhishing campaign leverages Microsoft 365 Direct Send featureSC StaffSeptember 14, 2026The attackers exploit Microsoft 365's Direct Send feature, a legitimate tool for devices and legacy applications to send emails without a dedicated account.
Email securityASCII smuggling challenges email phishing filters, Microsoft warnsLaura FrenchSeptember 4, 2026Invisible Unicode tag characters often used for AI prompt injection have appeared in high-volume phishing attacks.
Email security‘Empty envelope’ email attacks target company leadersLaura FrenchSeptember 4, 2026The technique bypasses RejectDirectSend by SMTP envelope sender blank.
Email securityMicrosoft Defender for Office 365 mistakenly flags Google search links as maliciousSC StaffSeptember 3, 2026The false positive is attributed to an inaccurate security classification within the Defender for Office 365 Safe Links feature.
Email securityBrave browser introduces email aliases to enhance user privacySC StaffAugust 31, 2026This feature aims to shield users' primary email addresses from websites, while still ensuring that messages from these services are forwarded.
Email securitySVG attachments used in widespread phishing campaignSC StaffAugust 28, 2026The attackers employed a broad, non-targeted approach, sending messages in waves and largely avoiding weekends.
Email securityRisk Advisory: Filtering Known-Bad Messages Does Not Prove Detection ReadinessSC Media Editorial Intelligence, reviewed by Erika CarraraAugust 26, 2026Block rate is not a proxy for detection coverage against these threats
