Cybersecurity Report 2026

This edition of the Monthly Threat Report focuses on industry events from the month of May 2026. As a news and commentary edition, this month’s report prioritizes depth on emerging threats and industry research over statistical data sections. 

In the observed sample, the chain reaches the legitimate Microsoft device-authentication experience. The victim is shown a short code, enters it into the Microsoft flow, and is then prompted to sign in. The visible Microsoft prompt indicates that the user is signing in to Microsoft Authentication Broker on another device. 

In plain terms, World Cup scams thrive on urgency, scarcity, and emotion. Still, for fans, the biggest risks include fake tickets, travel and hotel phishing, resale fraud, bogus visa help, fake merchandise, unofficial streams, malicious apps, event-themed emails or QR codes that steal credentials or money, and more.