Skip to the main content.

ABT Blog

Read about mortgage technology solutions topics

cybersecurity

Microsoft 365 illustration: a laptop shows a Please review and sign email, a Windows prompt asking to allow an app to make changes, and an Approved remote tools list, with Microsoft Intune and Microsoft Defender labels

11 min read

RMM Phishing: What Banks, Credit Unions, and Lenders Should Block

In This Article What Microsoft found in the RMM phishing campaigns Why signed remote tools slip through The administrator prompt decided the outcome...

Read More
Laptop showing three attack routes from the 2026 Microsoft Digital Defense Report: a Verify you are human prompt telling the user to press Win + R and paste, a Microsoft Teams call from an external caller, and an Outlook email asking Do you have a moment, beside the Microsoft 365 logo and the headline Keep staff working, Catch the stolen session, Report it to the board.

13 min read

Microsoft Digital Defense Report 2026: What Banks, Credit Unions, and Lenders Should Do First

In This Article Inside the Microsoft Digital Defense Report 2026 Attackers start with people and sign-ins Phishing now steals the session ClickFix...

Read More
Microsoft 365 hero image: four laptops, each with its own padlock, backing up to Microsoft Entra ID, labeled Windows LAPS and Microsoft Intune

12 min read

Windows LAPS: A Unique Local Admin Password on Every Managed Device

In This Article What Windows LAPS does Why a shared admin password puts every device at risk Windows LAPS vs. legacy Microsoft LAPS Is Windows LAPS...

Read More
Microsoft Defender for Office 365 settings panel beside a Payment Advice Note email with a password-protected ZIP file and a password shown as an image, illustrating Star Blizzard phishing checks for financial institutions

12 min read

Star Blizzard Phishing: What Banks, Credit Unions, and Lenders Should Check

In This Article What Star Blizzard changed in 2026 How a RedFlick phishing email works Four signs your staff can spot Seven Microsoft 365 and...

Read More
Microsoft 365 hero image: three domain controllers connected to a Microsoft Defender for Identity shield linked to Active Directory and Microsoft Entra ID, with the lines Sign-ins keep flowing, Domain controllers watched, Monitoring examiners expect

12 min read

Microsoft Defender for Identity: Protect the Domain Controllers Behind Every Login

In This Article Active Directory security starts with every staff sign-in What attackers do once they reach Active Directory What Microsoft Defender...

Read More
Microsoft Azure illustration: an app identity passes a checkpoint to locked Storage, Key Vault, SQL Database and Backup vault tiles, with the headline Workloads keep running, Every app identity scoped, Recovery locked in

13 min read

Azure Service Principal Security: What Storm-3168 Deleted, and What Held

In This Article What Storm-3168 did inside one Azure tenant Why an Azure service principal is worth stealing What held, and why the attacker's roles...

Read More
Service account security in Microsoft 365 and Microsoft Entra ID: vendor payments, scanner, ticketing, and shared mailbox accounts, each locked with an owner assigned

14 min read

Service Account Security: The Forgotten Accounts a Password Spray Found

In This Article The service account security gap a password spray found Why forgotten accounts fall first Four kinds of forgotten account, and the...

Read More
Calendar showing October 13, 2026 beside Windows 10, Office 2021, Windows Server 2012 R2 and Windows 11 24H2 cards marked updates end, with the Microsoft 365 logo

13 min read

Microsoft End of Support October 2026: Windows 10 and Office

Microsoft end of support in October 2026 hits Windows 10 ESU Year 1, Office 2021, Windows Server 2012 R2. What banks, credit unions, and lenders do...

Read More
Microsoft Entra Connect Sync bridge between Active Directory and Microsoft Entra ID breaking at the September 30 2026 deadline, with sync engine and health agent version panels

11 min read

Entra Connect Sync Stops Sept 30: Check Both Versions

In This Article What stops on September 30, and what does not The alarms are on the same list The floor expires 23 days after the deadline What...

Read More
Outlook shows an email with its appraisal PDF attachment blocked, beside Microsoft Entra ID Conditional Access reporting a non-compliant device and Microsoft Intune showing the device out of compliance.

8 min read

Conditional Access Now Covers Outlook Attachments

Microsoft moved Outlook attachment operations behind a separate internal application, and the Conditional Access policies you already scoped to...

Read More