Skip to the main content.

ABT Blog

Read about mortgage technology solutions topics

Microsoft 365 illustration: an Outlook inbox with Internal and External tags beside a Copilot panel, with Exchange Online, Microsoft Purview and Microsoft 365 Copilot labels and the headline Keep Copilot reading your inbox, Tag the mail from outside, Show examiners what it may read

14 min read

Copilot Prompt Injection by Email: Two Settings Banks, Credit Unions, and Lenders Should Check

In This Article What Microsoft published on October 8 and October 13 Why external email is the soft spot for Copilot prompt injection Step one: turn on the External tag Four layers, four different jobs What changes for a loan officer, and what stays...

Read More
Microsoft 365 hero image: a laptop with a BitLocker padlock beside a key tag linked to a Microsoft Entra ID cloud, with Microsoft Intune and Recovery key labels and the lines Keys within reach, Laptops locked if lost, Every key read on record

11 min read

BitLocker Encryption: Keep Every Laptop Locked and Every Recovery Key Within Reach

In This Article What BitLocker encryption does Where your BitLocker recovery keys live What changed for BitLocker in 2026 TPM only, or TPM plus a...

Read More
Microsoft 365 hero: Entra sign-in logs, a Conditional Access policy blocking legacy authentication, and apps that can read mail, headed Keep email working, Shut the legacy sign-ins, Show examiners who read what

12 min read

Flax Typhoon and Microsoft 365: What Banks, Credit Unions, and Lenders Should Check

In This Article What the October 8 Flax Typhoon advisory says Three tools aimed at Microsoft 365 mail Block the sign-ins a password spray depends on...

Read More
Microsoft 365 cybersecurity tabletop exercise for financial institutions: three inject cards, a laptop checklist, and a wall clock beside the lines Rehearse the first hour, Know who acts, Document every decision

12 min read

Cybersecurity Tabletop Exercise: Rehearse the First Hour of a Microsoft 365 Incident

In This Article What a cybersecurity tabletop exercise is Who belongs in the room Three Microsoft 365 scenarios to rehearse The notice clocks your...

Read More
Microsoft 365 illustration: a laptop shows a Please review and sign email, a Windows prompt asking to allow an app to make changes, and an Approved remote tools list, with Microsoft Intune and Microsoft Defender labels

11 min read

RMM Phishing: What Banks, Credit Unions, and Lenders Should Block

In This Article What Microsoft found in the RMM phishing campaigns Why signed remote tools slip through The administrator prompt decided the outcome...

Read More
Laptop showing three attack routes from the 2026 Microsoft Digital Defense Report: a Verify you are human prompt telling the user to press Win + R and paste, a Microsoft Teams call from an external caller, and an Outlook email asking Do you have a moment, beside the Microsoft 365 logo and the headline Keep staff working, Catch the stolen session, Report it to the board.

13 min read

Microsoft Digital Defense Report 2026: What Banks, Credit Unions, and Lenders Should Do First

In This Article Inside the Microsoft Digital Defense Report 2026 Attackers start with people and sign-ins Phishing now steals the session ClickFix...

Read More
Microsoft 365 hero image: four laptops, each with its own padlock, backing up to Microsoft Entra ID, labeled Windows LAPS and Microsoft Intune

12 min read

Windows LAPS: A Unique Local Admin Password on Every Managed Device

In This Article What Windows LAPS does Why a shared admin password puts every device at risk Windows LAPS vs. legacy Microsoft LAPS Is Windows LAPS...

Read More
Microsoft Defender for Office 365 settings panel beside a Payment Advice Note email with a password-protected ZIP file and a password shown as an image, illustrating Star Blizzard phishing checks for financial institutions

12 min read

Star Blizzard Phishing: What Banks, Credit Unions, and Lenders Should Check

In This Article What Star Blizzard changed in 2026 How a RedFlick phishing email works Four signs your staff can spot Seven Microsoft 365 and...

Read More
Microsoft 365 hero image: three domain controllers connected to a Microsoft Defender for Identity shield linked to Active Directory and Microsoft Entra ID, with the lines Sign-ins keep flowing, Domain controllers watched, Monitoring examiners expect

12 min read

Microsoft Defender for Identity: Protect the Domain Controllers Behind Every Login

In This Article Active Directory security starts with every staff sign-in What attackers do once they reach Active Directory What Microsoft Defender...

Read More
Microsoft Azure illustration: an app identity passes a checkpoint to locked Storage, Key Vault, SQL Database and Backup vault tiles, with the headline Workloads keep running, Every app identity scoped, Recovery locked in

13 min read

Azure Service Principal Security: What Storm-3168 Deleted, and What Held

In This Article What Storm-3168 did inside one Azure tenant Why an Azure service principal is worth stealing What held, and why the attacker's roles...

Read More