EXPLORING ANTI-PHISHING MEASURES IN MICROSOFT 365

Summary from the TLDR InfoSec newsletter

Microsoft 365 has anti-phishing measures like the First Contact Safety Tip, but there are weaknesses that allow attackers to bypass them. Attackers can hide safety tips and spoof encryption icons in Outlook by manipulating CSS in HTML emails. Despite being notified, Microsoft has not yet fixed these issues, potentially leaving organizations vulnerable to phishing attacks.