// Microsoft 365HIGH
FBI and international agencies released a joint advisory on October 8, 2026, warning of ongoing Chinese government-linked attacks exploiting Microsoft Exchange and Outlook infrastructure. Threat actors use EBurst for password spraying against Outlook Web Access and Exchange Web Services, and a tool called office-cli to automate access to Microsoft Outlook 365 mailboxes for email exfiltration. The campaign also targets Active Directory for credential theft and uses VPN clients for persistence across diverse sectors including critical infrastructure.
- FBI Warns Chinese Hackers Use Automated Tools and Botnets to Ste(opens in a new tab)
- Daily Drop (1357)(opens in a new tab)
- Flax Typhoon CISA Deadline: Patch 5 Exploited CVEs(opens in a new tab)
// Get alerts for Microsoft 365