Defending SaaS-based applications against ShinyHunters OAuth abuse - Microsoft

July 23 Email threat landscape: Q2 2026 trends and insights In the second quarter of 2026, the continuing effects of Microsoft’s disruption of the Tycoon2FA phishing platform contributed to sustained declines in several major phishing techniques, while threat actors expanded into Teams-based social engineering and employed increasingly automated and multi-stage attack chains.