Security analysts say integration with email and XDR will offer security teams more visibility into attacks as phishing is often involved in attack chains.
Microsoft recently detailed on its security blog an attack where malicious OAuth applications were used to compromise cloud tenants to gain control of Exchange Online settings to eventually spread spam.
BleepingComputer reports that American Airlines has confirmed that it was breached after being targeted by a phishing attack leveraging an employee's compromised Microsoft 365 account.
BleepingComputer reports that GitHub users are being targeted in an ongoing phishing campaign spoofing the CircleCI continuous integration and delivery platform, which commenced last week.
Russian advanced persistent threat group Sandworm-linked threat actors, tracked as UAC-0113, has been impersonating Ukrainian telecommunications providers EuroTransTelecom and Datagrooup to distribute the Warzone RAT and Colibri loader, The Hacker News reports.
