Microsoft 365 'Direct Send' abused to send phishing as internal users

Published on June 26, 2025

An ongoing phishing campaign abuses a little‑known feature in Microsoft 365 called "Direct Send" to evade detection by email security and steal credentials. [...]

Continue reading on website
Other news

The Hidden Risks of SaaS: Why Built-In Protections Aren't Enough for Modern Data Resilience

June 26, 2025
SaaS Adoption is Skyrocketing, Resilience Hasn’t Kept PaceSaaS platforms have revolutionized how businesses operate. They simplify collaboration, accelerate deployment, and reduce the overhead of managing infrastructure. But with their rise comes a subtle, dangerous assumption: that the convenience of SaaS extends to resilience.It doesn’t.These platforms weren’t built with full-scale data

New FileFix Method Emerges as a Threat Following 517% Rise in ClickFix Attacks

June 26, 2025
The ClickFix social engineering tactic as an initial access vector using fake CAPTCHA verifications increased by 517% between the second half of 2024 and the first half of this year, according to data from ESET."The list of threats that ClickFix attacks lead to is growing by the day, including infostealers, ransomware, remote access trojans, cryptominers, post-exploitation tools, and even