Phishing Attacks Rise in 2026 as QR Codes Target Microsoft 365

Phishing continues to be the primary method of initial entry for cyber attacks, as reported by Cisco Talos. In the latest analysis covering March to June 2026, phishing was involved in over half of cyber incidents requiring remediation, a significant increase from one-third in the previous quarter. Attackers are employing innovative tactics to evade detection, including sophisticated phishing-as-a-service (PhaaS) kits that provide advanced capabilities for cybercriminals.

One notable campaign utilized QR codes to harvest Microsoft 365 credentials, exploiting trusted cloud infrastructures for greater success. Cisco Talos recommends implementing stricter security measures such as multi-factor authentication and monitoring for suspicious activity to help combat these threats.