Healthcare security firm Proofpoint has found that more than three-quarters of email attacks on healthcare organizations use malicious URLs. The research also revealed that healthcare companies are particularly vulnerable to phishing attacks, as employees often click on links assuming they are safe. The report also highlighted that phishing emails often use subject lines with go-to terms such as “payment,” “request,” and “urgent,” and that attacks are most likely to occur on weekdays between 7 a.m. and 1 p.m.

Hackers Abuse Microsoft 365 Exchange Direct Send to Bypass Content Filters and Harvest Sensitive Data
Microsoft 365 Exchange Online’s Direct Send feature, originally designed to enable legacy devices and applications to send emails without authentication, has become an exploitable pathway


