Hackers Weaponize Microsoft's Security Alert System for Mass Phishing

Scammers have systematically exploited Microsoft's official notification channel—the email address users trust for legitimate security alerts—to send phishing messages that appear authentic. This months-long attack highlights a critical gap in how notification systems control who can send messages under the company's name. The breach undermines user confidence in real alerts and reveals that companies may not be adequately protecting their most trusted communication channels from unauthorized access.