Security News Microsoft Flags Multi-Stage AitM Phishing and BEC Attacks Targeting Energy Firms TheHackerNews Daniel Bender 23 Jan 2026 Microsoft reports a multi-stage AitM phishing and BEC campaign abusing SharePoint, inbox rules, and stolen session cookies to target energy orgs.