May 5, 2026

Breaking the code: Multi-stage ‘code of conduct’ phishing campaign leads to AiTM token compromise

In this article Multi-step social engineering campaign leading to credential theft Mitigation and protection guidance Microsoft Defender detections Hunting queries Indicators of compromise Phishing campaigns continue […]
May 1, 2026

Email threat landscape: Q1 2026 trends and insights

In this article Tycoon2FA disruption impact QR code phishing attacks CAPTCHA tactics Malicious payloads Business email compromise Defending against email threats Microsoft Defender detections During the […]
April 10, 2026

Investigating Storm-2755: “Payroll pirate” attacks targeting Canadian employees

In this article Storm-2755’s attack chain Defending against Storm-2755 and AiTM campaigns Microsoft Defender detection and hunting guidance Indicators of compromise Microsoft Incident Response – Detection […]
April 8, 2026

SOHO router compromise leads to DNS hijacking and adversary-in-the-middle attacks

In this article DNS hijacking attack chain: From compromised devices to AiTM and other follow-on activity Mitigation and protection guidance Microsoft Defender detection and hunting guidance […]
March 20, 2026

When tax season becomes cyberattack season: Phishing and malware campaigns using tax-related lures

In this article A wide range of tax-themed campaigns How to protect users and organization against tax-themed campaigns Microsoft Defender detection and hunting guidance Indicators of […]