Microsoft Warns of Large-Scale Phishing Campaign via Fake Compliance Notices (infosecurity-magazine.com)

• 35,000 users across 13,000 organizations targeted
• Fake compliance emails used for credential theft
• Recommendation: enable multi-factor authentication

"Microsoft researchers warn of a massive phishing campaign using fake compliance emails to steal credentials, targeting 35,000 users across 13,000 organizations globally. The emails prompt recipients to click a link and enter login details under the guise of a compliance review. Microsoft advises verifying email authenticity and enabling multi-factor authentication."