Skip to the main content.

ABT Blog

Read about mortgage technology solutions topics

email security

Microsoft 365 illustration: an Outlook calendar showing a fake meeting invitation with a Join button, beside Microsoft Defender for Office 365, Outlook, Microsoft Teams and Exchange Online

12 min read

Calendar Invite Phishing: What Banks, Credit Unions, and Lenders Should Clean Up

In This Article What Check Point found Why calendar invite phishing gets the click The part most cleanups miss: the calendar entry Which Microsoft...

Read More
Microsoft 365 hero image for October 2026 Patch Tuesday: a laptop planning board with Today, This week, and Normal process columns, cards for the Windows update pilot ring, reviewing files from email and chat, checking Outlook builds, and AD FS and Exchange, beside the Microsoft logo

14 min read

October 2026 Patch Tuesday: What Banks, Credit Unions, and Lenders Patch First

In This Article October 2026 Patch Tuesday by the numbers First: the Windows Shell flaw attackers already use Second: five Outlook flaws that fire...

Read More
Microsoft 365 illustration: an Outlook inbox with Internal and External tags beside a Copilot panel, with Exchange Online, Microsoft Purview and Microsoft 365 Copilot labels and the headline Keep Copilot reading your inbox, Tag the mail from outside, Show examiners what it may read

14 min read

Copilot Prompt Injection by Email: Two Settings Banks, Credit Unions, and Lenders Should Check

In This Article What Microsoft published on October 8 and October 13 Why external email is the soft spot for Copilot prompt injection Step one: turn...

Read More
Microsoft 365 hero: Entra sign-in logs, a Conditional Access policy blocking legacy authentication, and apps that can read mail, headed Keep email working, Shut the legacy sign-ins, Show examiners who read what

12 min read

Flax Typhoon and Microsoft 365: What Banks, Credit Unions, and Lenders Should Check

In This Article What the October 8 Flax Typhoon advisory says Three tools aimed at Microsoft 365 mail Block the sign-ins a password spray depends on...

Read More
Microsoft 365 illustration: a laptop shows a Please review and sign email, a Windows prompt asking to allow an app to make changes, and an Approved remote tools list, with Microsoft Intune and Microsoft Defender labels

11 min read

RMM Phishing: What Banks, Credit Unions, and Lenders Should Block

In This Article What Microsoft found in the RMM phishing campaigns Why signed remote tools slip through The administrator prompt decided the outcome...

Read More
Laptop showing three attack routes from the 2026 Microsoft Digital Defense Report: a Verify you are human prompt telling the user to press Win + R and paste, a Microsoft Teams call from an external caller, and an Outlook email asking Do you have a moment, beside the Microsoft 365 logo and the headline Keep staff working, Catch the stolen session, Report it to the board.

13 min read

Microsoft Digital Defense Report 2026: What Banks, Credit Unions, and Lenders Should Do First

In This Article Inside the Microsoft Digital Defense Report 2026 Attackers start with people and sign-ins Phishing now steals the session ClickFix...

Read More
Microsoft Defender for Office 365 settings panel beside a Payment Advice Note email with a password-protected ZIP file and a password shown as an image, illustrating Star Blizzard phishing checks for financial institutions

12 min read

Star Blizzard Phishing: What Banks, Credit Unions, and Lenders Should Check

In This Article What Star Blizzard changed in 2026 How a RedFlick phishing email works Four signs your staff can spot Seven Microsoft 365 and...

Read More
Exchange Online mail flow rules for financial institutions: encrypted outgoing mail, external tags, forwarding off, and Direct Send rejected

13 min read

Exchange Online Mail Flow Rules for Financial Institutions

In This Article What Exchange Online mail flow rules do for every message Three rules that make secure email automatic Close the side doors:...

Read More
Microsoft 365 Exchange Online SMTP AUTH basic authentication deadline, December 2026, with legacy sender devices

13 min read

The Last Basic Authentication Deadline: SMTP AUTH Changes in December 2026

In This Article What actually changes at the end of December 2026 What in your institution still sends mail this way How to find every dependency...

Read More
Microsoft 365 shared mailbox security for banks, credit unions, and mortgage companies

15 min read

Shared Mailbox Security for Financial Institutions

Shared mailboxes run the wire desk and the servicing queue. Microsoft documents several behaviors, including that converting a departing employee's...

Read More