Sam's News — email-security — 2026-09-09¶

Security¶

Microsoft is tracking active cloud intrusions since May 2026 using passkey-themed social engineering, where attackers impersonate IT staff and compromise identities to gain persistence in email, SharePoint, and OneDrive. Attackers use proxy infrastructure for automated data collection via Microsoft Graph APIs.

Active since May 2026
Attacks begin with phone/message impersonation of IT helpdesk
Identity compromise enables cloud reconnaissance and data exfiltration
SharePoint, OneDrive, email collection via REST APIs
Proxy-associated infrastructure used for automated collection

Sources: Microsoft Security Blog AI Web Searched

6.5 New phishing attack generates malicious pages dynamically inside victim's browser¶

Attackers are leveraging trusted Microsoft services and blob URLs to create stealthy phishing pages that render inside victims' browsers, evading traditional detection methods.

Sources: SecurityWeek RSS

5.5 Business Email Compromise Scams: New Guidance on Protection Strategies¶

Security advisories provide guidance on protecting financial accounts and business operations from business email compromise attacks.

Sources: Hawaii News Now RSS

5.5 New MyChart Phishing Scam Emerges¶

A new scam is posing as MyChart, likely targeting healthcare users.

Sources: consumeraffairs.com RSS

5.5 Scammers Impersonating MyChart Send Phishing Messages to Steal Personal Information¶

Fraudsters are sending fake MyChart messages to deceive users into disclosing personal health and financial information.

Sources: DailyVoice.com RSS

Cybersecurity¶

5.5 Proofpoint 2026 CISO report shows improved cyber resilience amid expanding AI role¶

Proofpoint's annual CISO report indicates that organizations are improving cyber resilience while AI capabilities are expanding the scope of security leadership responsibilities.

Sources: Proofpoint — Threat Insight RSS