AI-Assisted Phishing Campaign Sent Over A Million Personalized Emails
Researchers at Microsoft are tracking an AI-assisted phishing campaign that sent over a million emails attempting to conduct payment diversion scams.
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
DMARC Explained: How to Stop Attackers From Impersonating Your Domain
Email is still the most common way attacks begin. Phishing, business email compromise, and brand impersonation all rely on one simple weakness: by default, anyone can send an email that claims to come from your domain. The protocol that email runs on was never built to verify who a sender really is, so a criminal can forge the "From" address to look exactly like it came from your company, and the receiving mail server has no built-in way to know the difference. That is the gap attackers exploit, and it is the gap DMARC was designed to close.
Millions of Phishing Emails Use ASCII Smuggling to Bypass Security Filters
A massive phishing campaign is using invisible Unicode tag characters to evade security filters, according to researchers at Microsoft. This technique, known as “ASCII smuggling,” has grown popular over the past year for launching AI prompt injection attacks, but the same tactic can hide suspicious text in emails.
How to secure Exchange Server beyond the CVE-2026-62911 fix
Remote access has always been a core part of how on-premises Exchange works. Users need OWA to read their email from outside the office. Their devices need Autodiscover to set themselves up automatically. Keeping both reachable means keeping Exchange accessible from the Internet, and that opens up more of the server than most organisations realise. CVE-2026-62911 is the latest example. Microsoft released the fix on August 11, 2026.
Warning: New Phishing Kit Targets Hundreds of Organizations
Attackers have used a new phishing platform called “BigBear 2.0” to target hundreds of organizations across more than forty countries, according to researchers at CloudSEK. In about 10% of cases, the phishing attacks were able to bypass multifactor authentication.
Phishing Emails Use New Technique to Bypass Microsoft 365 Security Filters
Threat actors are using phishing emails with blank SMTP sender fields to bypass Microsoft 365 security filters, according to researchers at ReliaQuest. Microsoft 365 Exchange Online uses a feature called “RejectDirectSend” to block unauthenticated Direct Send emails from an organization’s trusted domain. If an attacker omits the domain field from these emails, however, RejectDirectSend will no longer block the messages.
Attackers Use Passkey-Themed Phishing to Breach Cloud Environments
Researchers at Microsoft are tracking a social engineering campaign that uses passkey-themed lures to trick users into granting persistent access to their accounts and online work environments.
Cisco Secure Email Gateway vulnerability (CVE-2026-76461) in active exploitation
On September 14, 2026, Cisco disclosed a vulnerability in Cisco Secure Email Gateway. CVE-2026-76461 is a critical (CVSS score of 9.8) SQL injection flaw in the email parsing functionality of Cisco AsyncOS Software. Successful exploitation “could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system.” Cisco confirmed exploitation of the vulnerability in the wild, and the U.S.
Warning: "Slop Squatting" Directs AI Users to Phishing Pages
Threat actors are increasingly leveraging AI hallucinations to plant phishing links and other malicious content in AI output, IEEE Spectrum reports. Large language models (LLMs) sometimes fabricate information, including web domains, when answering users’ questions. Attackers are registering these hallucinated web domains to host phishing pages.
Phishing Campaign Targets Employees with Malicious SVG Files
Researchers at INKY observed a major phishing campaign that used SVG (Scalable Vector Graphics) image files to deliver malicious JavaScript. While abuse of SVG files isn’t new, INKY says their use in phishing campaigns has exploded over the past year.