Phishing attacks continue to evolve, and email is no longer the only entry point. Attackers combine impersonation, compromised accounts, QR codes, trusted cloud services, collaboration platforms such as Microsoft Teams, and increasingly AI-assisted techniques to bypass traditional defenses and reach users.

This session explores how Microsoft 365 helps defend against modern phishing threats across email and collaboration workloads using Exchange Online Protection, Microsoft Defender for Office 365, email authentication, Safe Links, Safe Attachments, user reporting, and investigation capabilities.

Through live demonstrations, real-world attack scenarios, and lessons learned from customer environments, we'll follow phishing attacks from delivery to detection, response, and recovery. We'll examine how Microsoft protects users in Exchange Online and Microsoft Teams, how attackers attempt to bypass these protections, and what organizations can do to strengthen their defenses.

We'll also look at SPF, DKIM, and DMARC in real-world environments, including where email authentication helps, where it does not, and the common mistakes that can leave organizations exposed.

In addition, we'll discuss emerging phishing trends, including QR-code phishing, AI-assisted attacks, hidden instructions designed to influence AI systems, and why layered protection remains essential as attackers continue to evolve their techniques.

Whether you're responsible for messaging, collaboration, security, or Microsoft 365 administration, you'll leave with practical guidance and a clearer understanding of how to build layered phishing protection across Microsoft 365.