What’s new, updated, or recently released in Microsoft Security

Microsoft’s April 2026 security round-up highlights rising email-based threats (notably credential phishing, QR-code phishing, and CAPTCHA-gated campaigns) and Microsoft’s disruption of the Tycoon2FA phishing platform, which reduced phishing volume by ~15% but prompted shifts in attacker tactics. The blog details human-operated intrusions abusing Microsoft Teams for cross-tenant helpdesk impersonation to obtain remote access, conduct lateral movement using legitimate admin tools, and exfiltrate data, and describes a domain compromise case where predictive shielding limited lateral spread. New/