Crooks are abusing misconfigurations to trick victims into thinking they received an email from their bosses and HRs.

South Korean pharma giant Boryung Corporation leaked 8 million internal messages and employee records via an exposed MongoDB ...

Cybercriminals appear to have found a troubling new way to bypass Microsoft 365's email security defenses and deliver convincing phishing emails to targeted users. The tactic exploits a legitimate ...

Employees now learn the truth faster than internal messages travel. When external visibility outruns communication, an EVP holds only if it matches lived culture. By 2025, pressure on organizational ...

An ongoing phishing campaign abuses a little‑known feature in Microsoft 365 called "Direct Send" to evade detection by email security and steal credentials. Direct Send is a Microsoft 365 feature that ...