13 min read
In This Article What Storm-3168 did inside one Azure tenant Why an Azure service principal is worth stealing What held, and why the attacker's roles could not remove it Six controls for your own service principals What examiners expect from your...
Read More
14 min read
In This Article The service account security gap a password spray found Why forgotten accounts fall first Four kinds of forgotten account, and the...
13 min read
In This Article What Exchange Online mail flow rules do for every message Three rules that make secure email automatic Close the side doors:...
13 min read
Microsoft end of support in October 2026 hits Windows 10 ESU Year 1, Office 2021, Windows Server 2012 R2. What banks, credit unions, and lenders do...
16 min read
In This Article What One Team Actually Creates Who Can Create a Team in Your Tenant Right Now The Guests Who Are Still in Your Directory The Private...
11 min read
In This Article What stops on September 30, and what does not The alarms are on the same list The floor expires 23 days after the deadline What...
8 min read
Microsoft moved Outlook attachment operations behind a separate internal application, and the Conditional Access policies you already scoped to...
14 min read
In This Article What a penetration test is, in your regulator's words What your regulator actually requires What Microsoft permits you to test The...
11 min read
Two financial regulators flagged a Microsoft Power Pages setting that exposes Dataverse records. No CVE, no patch, and your scanner will not see it.
14 min read
In This Article The producers are the asset, and the cutover is the risk to the asset Three answers to "what happens to their tenant?" How the link...
