2023 Cyber Security Report on Microsoft 365 Threat Landscape

The document is a Cyber Security Report that provides an in-depth analysis of the Microsoft 365 threat landscape as conducted by Hornetsecurity's Security Lab. It examines real-world data collected from over 25 billion emails processed from October 2021 to September 2022. The report categorizes 40.5% of these emails as 'unwanted,' indicating a rising trend in spam and potential threats. It details various attack methods and highlights the increased use of malicious attachments, particularly in the context of recent exploits like Follina. The report also addresses concerns regarding the shared responsibility model in cloud services, suggesting that many organizations mistakenly assume their data in Microsoft 365 is secure. Predictions for 2023 include a rise in attacks targeting mobile devices and multi-factor authentication systems. The report emphasizes the crucial need for continuous user training and the implementation of robust email security measures to combat these evolving threats.