Scammers exploit Microsoft email system in phishing campaign

Scammers are exploiting a loophole in Microsoft’s email infrastructure to send spam messages that appear to originate from the company’s official account notification system, raising concerns about potential phishing risks for users. The abuse appears to involve Microsoft’s internal email address, typically used for legitimate account alerts such as two-factor authentication codes and security notifications. […]