01/23/2026
Microsoft has flagged a multi-stage adversary-in-the-middle (AiTM) attack that leverages compromised infrastructure to bypass security controls and capture credentials.
The report, covered by The Hacker News, breaks down how the attack works, what makes it effective, and what organizations should be aware of moving forward.
Read the full story for more information:
Microsoft reports a multi-stage AitM phishing and BEC campaign abusing SharePoint, inbox rules, and stolen session cookies to target energy orgs.