Microsoft 365 users endured widespread outages this week, and attackers are already preparing to exploit the chaos. KnowBe4’s latest phishing report reveals a troubling evolution: criminals have stopped building fake websites and started borrowing real ones. In this episode, Noel Bradford dissects volume eight of the Phishing Threat Trends Report, examining device code flow attacks where victims check the URL, complete their MFA, sign in on legitimate Microsoft pages, and still hand over account access. He questions the report’s statistical claims, offers KnowBe4 a right of reply, and provides five practical Monday-morning actions for blocking these attacks before they become widespread. The old security advice centred on inspecting web addresses. The web address is now the one honest element in the attack. It’s time to teach your team better questions.
