More of a whitepaper than an article, the following describes in detail what cross-domain spoofing is and what you can do to protect yourself against it: https://support.office.com/en-us/article/anti-spoofing-protection-in-office-365-d24bb387-c65d-486e-9...
It's a long read, but definitely worth it, as it gives you tons of insights, as well as information on what's coming in the future.
