May 22, 2026 at 07:42PM

■■■■□ System Notification Abuse: How Attackers Force Microsoft to Send Phishing Emails.

Attackers exploit Microsoft Entra ID to inject malicious messages into legitimate system emails, bypassing authentication and deceiving users.