Microsoft 365 'Direct Send' abused to send phishing as internal users

Jul 28, 2025