Phishing Emails Use New Technique to Bypass Microsoft 365 Security Filters
KnowBe4, Tuesday, September 15th, 2026
A new evasion technique lets phishing mail slip past Microsoft 365 filtering and reach user inboxes.
KnowBe4 details a phishing evasion method that defeats Microsoft 365 security filtering.
The technique manipulates message structure and link presentation so that automated scanning does not resolve the malicious destination.
The article walks through how the campaigns are constructed and what indicators remain visible to a trained recipient. KnowBe4 argues that filter bypasses of this kind make human detection the necessary last layer.