AI attackers exploit Microsoft 365 misconfigurations at scale, with 13M phishing emails blocked in October 2025.