In early 2026, Microsoft highlighted an increase in email threats, specifically citing climbing incidents of credential phishing, QR code phishing, and CAPTCHA-gated campaigns. The disruption of the Tycoon2FA phishing platform by Microsoft led to a 15% reduction in such threats and altered the tactics used by attackers.