Threat actors use agentic AI tooling to find and abuse exposed secrets - Microsoft

November 5 17 min read Email threat landscape: Q3 2026 trends and insights Microsoft Threat Intelligence observed a sharp rise in email-based phishing activity at the end of Q3 2026 (July – September), even as QR code phishing declined, CAPTCHA-gated phishing recovered, and malicious messages spoofing familiar business-service sender domains exposed risks associated with security overrides.