#DirectSend
LightNews LightNews
chrislehr.com
KQL to review #DirectSend abuse

EmailEvents​
| where SenderMailFromDomain == RecipientDomain​
| where isempty(Connectors)​
| where DeliveryAction !in ("Junked", "Blocked")​
| extend AuthenticationDetails = parse_json(AuthenticationDetails)​
| where AuthenticationDetails.DMARC == "fail"​
August 5, 2025 at 11:47 PM
andresbohren.bsky.social
🚀What is #DirectSend and how to secure it
techcommunity.microsoft.com/blog/exchang...
What is Direct Send and how to secure it | Microsoft Community Hub
If you wanted to learn more about the Direct Send feature, this is the post for you!
techcommunity.microsoft.com
August 4, 2025 at 8:01 PM
schnoll.bsky.social
New Reject Direct Send setting in Exchange Online now in Public Preview!

techcommunity.microsoft.com/blog/exchang...

#MSExchange #ExchangeOnline #DirectSend #PublicPreview
Introducing more control over Direct Send in Exchange Online | Microsoft Community Hub
Introducing more control over Direct Send in Exchange Online.  
techcommunity.microsoft.com
April 28, 2025 at 5:06 PM
ralf-ladner.bsky.social
Wie Angreifer die Microsoft-365-Funktion „Direct Send“ ausnutzen

#Cybersecurity #Cybersicherheit #DirectSend #EMailSecurity #EMailSicherheit #ExchangeOnline KnowBe4 #KnowBe4ThreatLab #Microsoft365 #SecurityAwareness

netzpalaver.de/2026/...
September 16, 2026 at 12:43 PM
neroqc.bsky.social
Hackers Exploit Microsoft 365 Direct Send to Evade Filters and Steal Data
gbhackers.com/hackers-expl...

#Infosec #Security #Cybersecurity #CeptBiro #Exploit #Microsoft365 #DirectSend #Evade #Filters #StealData
Hackers Exploit Microsoft 365 Direct Send to Evade Filters and Steal Data
Cybercriminals are increasingly exploiting a legitimate Microsoft 365 feature designed for enterprise convenience, turning Exchange Online's Direct Send into a dangerous vector.
gbhackers.com
October 22, 2025 at 8:43 PM
msxfaq.de
#MSXFAQ Exchange DirectSend/RejectDirectSend www.msxfaq.de/cloud/exchan... - Es ist kein #Expoit!. aber es gibt viel Verwirrung um eine neue Einstellung in #ExchangeOnline. So steuern sie wer Mails von ihrer eigenen Domain direkt an ihren Tenant senden kann, um Phishing zu verhindern.
August 7, 2025 at 8:06 AM
adamhotep.infosec.exchange.ap.brid.gy
A teammate and I wrote a quick overview on the Microsoft #directsend issue that bypasses email authentication and anti-spoofing:
https://blog.talosintelligence.com/reducing-abuse-of-microsoft-365-exchange-onlines-direct-send/
Reducing abuse of Microsoft 365 Exchange Online’s Direct Send
Cisco Talos has observed increased activity by malicious actors leveraging Direct Send as part of phishing campaigns. Here's how to strengthen your defenses.
blog.talosintelligence.com
October 21, 2025 at 4:08 PM
chrislehr.com
EXO ETR to quarantine DirectSend emails (sample, use with care/caution/and lighter handed actions than the picture!
August 5, 2025 at 11:49 PM