Microsoft reports 7.3 billion email phishing threats in Q3 2026 with spoofed business domains rising
PHISHINGMicrosoftredteam/daily · 1 source
- Severity
- Medium
- Sources
- 1
What happened
Microsoft says criminals sent about 7.3 billion phishing emails between July and September 2026, with a sharp rise in September. Many messages pretended to come from well-known business services like DocuSign, and some got through because of security exceptions set by organisations.
Like I’m new · Written by AI from 1 source · Wrong?
What to do
- Review tenant and user-level email security exceptions that override protections for failed or malicious messages.
- Treat unexpected document-signing, invoice, payroll and survey requests with caution, even when the branding looks familiar.
- Be wary of QR codes in emails and attachments, and check the sender through a separate channel before acting.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Microsoft Security Blog
Who and what is in it
Companies