Microsoft 365 'Direct Send' abused to send phishing as internal users

https://www.bleepingcomputer.com/news/security/microsoft-365-direct-send-abused-to-send-phishing-as-internal-users/