Product
M365
- First Reported
- Mar 17, 2023
- Latest Reported
- Oct 21, 2026
Reported Context (2)
- In our data, most of these engagements turned out to be compromised M365 identities leading to attempted (or, less frequently, successful) financial theft or resource hijacking, as attackers tried to use organizations’ Sophos 2026 Active Adversary Report: Identity Failures Dominate Initial Access
- versions of Microsoft Outlook for Windows are impacted to include the locally installed Outlook from M365. Other versions of Microsoft Outlook such as Android, iOS, Mac as well as Outlook on the web and other CVE-2023-23397 Lets Malicious Outlook Invitations Trigger NTLM Hash Exposure
CVE (2)
Malware (8)
People (9)
Threat Actors (11)
MITRE ATT&CK (13)
Vendors (4)
Products (10)
Tools (11)
Industries (5)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.