Skip to the main content.

ABT Blog

Read about mortgage technology solutions topics

cybersecurity

Service account security in Microsoft 365 and Microsoft Entra ID: vendor payments, scanner, ticketing, and shared mailbox accounts, each locked with an owner assigned

14 min read

Service Account Security: The Forgotten Accounts a Password Spray Found

In This Article The service account security gap a password spray found Why forgotten accounts fall first Four kinds of forgotten account, and the...

Read More
Calendar showing October 13, 2026 beside Windows 10, Office 2021, Windows Server 2012 R2 and Windows 11 24H2 cards marked updates end, with the Microsoft 365 logo

13 min read

Microsoft End of Support October 2026: Windows 10 and Office

Microsoft end of support in October 2026 hits Windows 10 ESU Year 1, Office 2021, Windows Server 2012 R2. What banks, credit unions, and lenders do...

Read More
Microsoft Entra Connect Sync bridge between Active Directory and Microsoft Entra ID breaking at the September 30 2026 deadline, with sync engine and health agent version panels

11 min read

Entra Connect Sync Stops Sept 30: Check Both Versions

In This Article What stops on September 30, and what does not The alarms are on the same list The floor expires 23 days after the deadline What...

Read More
Outlook shows an email with its appraisal PDF attachment blocked, beside Microsoft Entra ID Conditional Access reporting a non-compliant device and Microsoft Intune showing the device out of compliance.

8 min read

Conditional Access Now Covers Outlook Attachments

Microsoft moved Outlook attachment operations behind a separate internal application, and the Conditional Access policies you already scoped to...

Read More
A standard perimeter penetration test stops at the network edge while session token theft, mailbox forwarding and malicious app consent happen inside the Microsoft 365 tenant

14 min read

Microsoft 365 Penetration Testing for Financial Institutions

In This Article What a penetration test is, in your regulator's words What your regulator actually requires What Microsoft permits you to test The...

Read More
Microsoft Power Pages admin panel showing Anonymous Access set to Allowed, with customer records flowing out of an open vault

11 min read

Power Pages Misconfiguration: No CVE, No Patch

Two financial regulators flagged a Microsoft Power Pages setting that exposes Dataverse records. No CVE, no patch, and your scanner will not see it.

Read More
Microsoft 365 Exchange Online SMTP AUTH basic authentication deadline, December 2026, with legacy sender devices

13 min read

The Last Basic Authentication Deadline: SMTP AUTH Changes in December 2026

In This Article What actually changes at the end of December 2026 What in your institution still sends mail this way How to find every dependency...

Read More
Microsoft 365 adversary in the middle attack chain ending in a registered Microsoft Entra ID device and an enrolled Windows Hello for Business credential

11 min read

Knight Office AiTM Kit: Persistence Past Password Reset

In This Article What Huntress found How this differs from the August Windows Hello research The step that survives your incident response Whether...

Read More
Shadow IT discovery dashboard showing sanctioned and unsanctioned cloud apps for a financial institution, with Microsoft 365 branding

15 min read

Shadow IT in Financial Institutions: Find It, Govern It

Your staff already told you which tools they need. They just did not ask first. How to find unsanctioned apps in a Microsoft 365 tenant with Defender...

Read More
Cyber incident reporting deadlines for financial institutions, showing the 36 hour, 72 hour and 30 day regulatory clocks

12 min read

The 36-Hour, 72-Hour, and 30-Day Incident Reporting Clocks

Three federal rules, three deadlines, and three different definitions of the moment the clock starts. What triggers each one, and what Microsoft 365...

Read More