Dark Reading
Microsoft Exchange Flaw Lets Attackers Spoof Any Email Address
"Ghost-Sender" uses Exchange Online or on-premises in hybrid mode with a third-party mail server or spam filter to achieve this level of spoofing.
Read the full article
This is a curated summary. The complete article is available at Dark Reading.