Microsoft email anti-spoofing setting has a bypass, American Banker reports
American Banker says researchers showed that a message with no return address can slip past Reject Direct Send, Microsoft's setting for blocking external emails disguised as internal.
TLDR
American Banker reports that researchers bypassed Reject Direct Send, a Microsoft setting released in 2025 to block external emails disguised as internal. The workaround uses a message with no return address, the publication says. It also notes that credit unions were told to close this kind of gap in 2021.
Combined views
955
1 Source, first seen ago
1 likes