11 min read
Knight Office AiTM Kit: Persistence Past Password Reset
In This Article What Huntress found How this differs from the August Windows Hello research The step that survives your incident response Whether...
security
15 min read
Microsoft 365 Password Policy for Financial Institutions
In This Article Start With the Tenant, Not the Policy Binder What the Cloud Password Policy Actually Enforces Two Gaps Between the Written Policy and...
12 min read
Conditional Access Exclusions: The List Nobody Reviews
Every institution grants Conditional Access exceptions. Microsoft documents how those lists grow, names access reviews as the compensating control,...
15 min read
Shared Mailbox Security for Financial Institutions
Shared mailboxes run the wire desk and the servicing queue. Microsoft documents several behaviors, including that converting a departing employee's...
15 min read
Windows Hello for Business Key Abuse: What Financial Institutions Need to Verify
Malware already running in a signed-in Windows session can use that user's Windows Hello for Business key to authenticate to Microsoft Entra ID, with...
13 min read
Payroll Pirates: The Microsoft 365 Attack Your Alerts Miss
A Microsoft 365 session-hijacking campaign is reading payroll and finance mail while deliberately avoiding the account-modification signals most...
10 min read
Copilot Studio Agent Authentication: The August 25 Question
Microsoft is shipping an admin control that stops Copilot Studio agents from authenticating with their builder's stored credentials. It is off by...
14 min read
Entra Risk Policies Retire Oct 1, 2026: What Banks Must Do
In This Article What actually changes on October 1 The self-service loop that goes away first The detections keep firing. No risk policy acts on...
14 min read
Hotel Wi-Fi Is Stealing Microsoft 365 Sessions
In This Article What Microsoft Found on Hotel and Conference Wi-Fi Two Attack Paths, and Why the Difference Decides Your Controls The Part That...
15 min read
Defender's New Password-Protected Attachment Quarantine: What Lenders Should Decide
Microsoft is adding an opt-in Safe Attachments setting that quarantines password-protected attachments Defender cannot scan or detonate. It is off by...
