Vendor
Microsoft reported a sharp rise in phishing activity in Q3 2026, characterized by the abuse of spoofed business-service domains and the exploitation of overly permissive organizational security overrides to deliver credential-harvesting threats.