
For years, cybersecurity advice has included a simple rule: check the sender’s email address. If the message comes from a trusted company domain, that’s usually a good sign. Unfortunately, attackers are always adapting. I have recently seen a scam campaign where attackers are abusing Microsoft’s own internal notification system to send spam and phishing content…