An interesting read from Microsoft about a multi-stage campaign observed between April 14 and 16, 2026, targeting more than 35,000 users across 13,000 organisations in 26 countries. https://www.microsoft.com/en-us/security/blog/2026/05/04/breaking-the-code-multi-stage-code-of-conduct-phishing-campaign-leads-to-aitm-token-compromise/ #microsoft #sirt #phishing #aitm #tokencompromise #cybersecurity #danweis #nexon #hackproofyourself #boardroomcyber #danweis