July 2026 - Com Technology

Ghost Sender: the Microsoft 365 flaw that makes fake emails look real

By Lance | 23/07/2026

Laptop showing an email inbox with one message flagged by a red warning outline and a hooded ghost figure emerging from it, illustrating the Microsoft 365 Ghost Sender spoofing flaw

A newly documented Microsoft 365 misconfiguration called Ghost Sender lets attackers slip spoofed emails past SPF, DKIM and DMARC and straight into the inbox. Here is what it means for your business and how to close it.

Your domain name is the master key to your business. Who else is holding it?

By Lance | 09/07/2026

Two people sit at separate desks working on computers in an office. Papers and shelves line the walls. One person wears a reflective safety vest. A window and printer are at the back of the room.

It’s 4:40pm on a Friday. The accounts inbox goes quiet. Not slow-afternoon quiet. Quiet like nothing has arrived in forty minutes on a day that normally brings a hundred emails. Someone tries to log in to Xero. Password rejected. They click “Forgot password” and wait for a reset email that never comes. Someone else tries…