Thank You!

EvilTokens is a criminal of online service which tricks people into thinking they are logging into a real Microsoft website. In reality, this scam allows attackers to take over victims’ Microsoft 365 accounts. This service started in 2026 and makes it easier for scammers to target Microsoft 365 users. It does this by sending customized messages and generating fake login codes while also automating their actions once they gain access to accounts.

A seemingly harmless email can contain instructions meant for the AI assistant that handles, summarizes, or acts on your email. This is important as organizations start to connect AI tools like Microsoft Copilot to email, calendars, files, and collaboration tools.

This edition focuses on industry events from the month of August 2026. As a news and commentary edition, this month’s report prioritizes emerging threats and industry research over statistical sections.

The latest Microsoft Outlook outage shows that cloud email downtime is more than an IT inconvenience. It can quickly become a business-continuity issue. Microsoft has pinpointed the underlying issue to a problem in a fundamental authentication configuration impacting several Microsoft 365 services, and it is presently evaluating a solution strategy.