Skip to the main content.

ABT Blog

Read about mortgage technology solutions topics

phishing

Microsoft 365 hero image: know who can reach your staff, know which accounts automation skips in Microsoft Defender, and own every exception in writing

11 min read

Help Desk Impersonation to AD CS Abuse: What to Check

In This Article What Microsoft found in two intrusions The one account automation left alone Review your attack disruption exclusions this week The...

Read More
Microsoft 365 hero image: know what runs on every PC, check the software inventory in Microsoft Defender, and approve every tool in writing

10 min read

MDM Enrollment Attacks: What Financial Institutions Check

In This Article What Huntress found in two incidents Why removing the remote tool is not the fix The question to ask: which management agents belong...

Read More
Microsoft 365 hero: patch the internet edge, stop phishing at sign-in with a Microsoft Entra ID passkey, and know the NCUA 72-hour clock

11 min read

Black October: What Credit Unions Should Do Now

In This Article What "Black October" means for credit unions The PHP flaws CISA says to patch now Attacks that run at machine speed Move staff...

Read More
Microsoft 365 hero image: a laptop signing in through Microsoft Entra ID with Conditional Access and Token Protection, a copied session pass crossed out behind a dotted line, and the headline Sign in from anywhere, Stolen sessions stop working, Every cleanup on record

14 min read

Microsoft 365 Token Replay Campaign: What Banks, Credit Unions, and Lenders Should Do Now

In This Article What Huntress found How token spraying works Why the block list kept falling behind What the attacker left behind Read a Conditional...

Read More
Microsoft 365 illustration: an Outlook calendar showing a fake meeting invitation with a Join button, beside Microsoft Defender for Office 365, Outlook, Microsoft Teams and Exchange Online

12 min read

Calendar Invite Phishing: What Banks, Credit Unions, and Lenders Should Clean Up

In This Article What Check Point found Why calendar invite phishing gets the click The part most cleanups miss: the calendar entry Which Microsoft...

Read More
Microsoft 365 illustration: a laptop shows a Please review and sign email, a Windows prompt asking to allow an app to make changes, and an Approved remote tools list, with Microsoft Intune and Microsoft Defender labels

11 min read

RMM Phishing: What Banks, Credit Unions, and Lenders Should Block

In This Article What Microsoft found in the RMM phishing campaigns Why signed remote tools slip through The administrator prompt decided the outcome...

Read More
Laptop showing three attack routes from the 2026 Microsoft Digital Defense Report: a Verify you are human prompt telling the user to press Win + R and paste, a Microsoft Teams call from an external caller, and an Outlook email asking Do you have a moment, beside the Microsoft 365 logo and the headline Keep staff working, Catch the stolen session, Report it to the board.

13 min read

Microsoft Digital Defense Report 2026: What Banks, Credit Unions, and Lenders Should Do First

In This Article Inside the Microsoft Digital Defense Report 2026 Attackers start with people and sign-ins Phishing now steals the session ClickFix...

Read More
Microsoft Defender for Office 365 settings panel beside a Payment Advice Note email with a password-protected ZIP file and a password shown as an image, illustrating Star Blizzard phishing checks for financial institutions

12 min read

Star Blizzard Phishing: What Banks, Credit Unions, and Lenders Should Check

In This Article What Star Blizzard changed in 2026 How a RedFlick phishing email works Four signs your staff can spot Seven Microsoft 365 and...

Read More
Hotel conference room laptop showing a captive portal sign-in, with a stolen Microsoft 365 session token flowing to an attacker past Microsoft Entra ID controls

14 min read

Hotel Wi-Fi Is Stealing Microsoft 365 Sessions

In This Article What Microsoft Found on Hotel and Conference Wi-Fi Two Attack Paths, and Why the Difference Decides Your Controls The Part That...

Read More
A credit union professional reviewing email on a laptop with a Microsoft 365 security shield deflecting a phishing attack

15 min read

Security Awareness Training for Financial Institutions

In This Article The control with no dashboard: your people Why your staff is the most-attacked control at a financial institution The training your...

Read More