Email threat landscape: Q3 2026 trends and insights
At a glance
Low rather than Medium: UK relevance is 40 of 100, little UK-specific signal so far.
Briefing
- Businesses should review their email security measures to address the evolving phishing tactics observed in Q3 2026.
Next steps
Monitor- For awareness — no fixed action deadline for this reporting
- The report notes changes in phishing tactics, including a decline in QR code phishing and a recovery in CAPTCHA-gated phishing methods.
Next steps
Monitor- No immediate technical action — track if your estate depends on the products or vendors discussed
Summary
- Microsoft Threat Intelligence reported a significant increase in email-based phishing activity during the final quarter of 2026, with QR code phishing decreasing and CAPTCHA-gated phishing recovering.
- Malicious emails impersonating trusted business-service domains highlighted risks linked to security overrides during Q3 2026.
Read the original reportMicrosoft Security Blog(opens in a new tab)
Pulse
Last change 3d ago · Recheck overdue since 6 Nov 2026, 17:02 UK time
- Story5 Nov 2026, 17:02 UK time · 3d ago
Linked reporting from Microsoft Security Blog (research).
Read source (Microsoft Security Blog)
1 entry so far. The timeline chart appears once this story has more history.
Sources
- Microsoft Security BlogResearcher
Email threat landscape: Q3 2026 trends and insights
How we know
Statements extracted from sources. Higher confidence means stronger corroboration.
- ClaimedHeadline60% confidence
Email threat landscape: Q3 2026 trends and insights
- ProbableSummary fact75% confidence
Microsoft Threat Intelligence observed a sharp rise in email-based phishing activity at the end of Q3 2026 (July – September), even as QR code phishing declined, CAPTCHA-gated phishing recovered, and malicious messages spoofing familiar business-service sender domains exposed risks associated with security overrides. The post Email threat landscape: Q3 2026 trends and insights appeared first on Microsoft Security Blog.