Hornetsecurity’s October report reviews the EvilTokens disruption, active exploitation of SharePoint and Atlassian flaws, and a Proofpoint-tracked M365 password-spraying campaign, with guidance on service accounts, device-code phishing and patching.
Hornetsecurity describes 365 Total Protection’s real-time Microsoft 365 threat alerts, configurable thresholds and integrations. It says Q4 2026 updates will add email-assessment explanations and a Control Panel AI assistant.
Hornetsecurity’s 2027 survey of 400 IT and cybersecurity experts found 18% of organizations reported ransomware, down from 24%; 45% lacked confidence in their defenses. Phishing was the leading reported vector, while just 9% felt staff could reliably spot AI-generated l
Hornetsecurity’s interviews with three CISOs and a broader poll describe cautious AI adoption, uneven governance and awareness, and concerns including synthetic identity fraud, data poisoning, and sensitive-data exposure.
The article recommends continuous, role-specific security awareness training to help employees recognize social engineering, verify unusual requests and report concerns. It outlines practical program measures and promotes Hornetsecurity’s training service.
Hornetsecurity says its Q4 2026 Microsoft 365 updates will add tenant permission-risk visibility, clearer email assessments, adaptive Teams awareness training and an AI Cyber Assistant for administrators and MSPs.
Hornet Security identified over 150,000 messages and more than 40 callback numbers from September 18 to October 2, 2026. Its calls found operators following transaction scripts; the numbers were associated with Onoff, but the users were not identified.
The guide recommends layered ransomware defenses, from phishing-resistant MFA and network segmentation to monitoring, incident-response planning, protected backups, and tested recovery procedures.
A practical guide to security awareness programs recommends ongoing, role-based training, realistic phishing simulations, frequent reinforcement, easy reporting, and using program results and incident lessons to improve employee security habits.
