@volexity.com recently identified multiple Russian threat actors targeting users via #socialengineering + #spearphishing campaigns with Microsoft 365 Device Code authentication (a well-known technique) with alarming success: www.volexity.com/blog/2025/02...
#dfir #threatintel #m365security
#dfir #threatintel #m365security
Multiple Russian Threat Actors Targeting Microsoft Device Code Authentication
Starting in mid-January 2025, Volexity identified several social-engineering and spear-phishing campaigns by Russian threat actors aimed at compromising Microsoft 365 (M365) accounts. These attack cam...
www.volexity.com
February 13, 2025 at 10:39 PM
@volexity.com recently identified multiple Russian threat actors targeting users via #socialengineering + #spearphishing campaigns with Microsoft 365 Device Code authentication (a well-known technique) with alarming success: www.volexity.com/blog/2025/02...
#dfir #threatintel #m365security
#dfir #threatintel #m365security
I received an interesting #M365 subscription email the other week, that turned out to be a scam.
I figured I'd pick it apart, and found it curious enough to share the details.
#entra #infosec #m365security #azure
ericonidentity.com/2025/02/20/a...
I figured I'd pick it apart, and found it curious enough to share the details.
#entra #infosec #m365security #azure
ericonidentity.com/2025/02/20/a...
An interesting M365 billing scam - Eric on Identity
A look at a recent spam scam email that I received, trying to understand what mechanism the attacker is using to deliver the scam email.
ericonidentity.com
February 20, 2025 at 2:27 PM
I received an interesting #M365 subscription email the other week, that turned out to be a scam.
I figured I'd pick it apart, and found it curious enough to share the details.
#entra #infosec #m365security #azure
ericonidentity.com/2025/02/20/a...
I figured I'd pick it apart, and found it curious enough to share the details.
#entra #infosec #m365security #azure
ericonidentity.com/2025/02/20/a...
Your cloud isn’t broken. That’s why risks go unnoticed. Access grows, permissions drift, visibility fades.
Underneath, your environment is becoming harder to control with every change.
Fix it before it becomes a problem.
#CloudSecurity #CyberSecurity #CloudRisk #M365Security #AWSSecurity
Underneath, your environment is becoming harder to control with every change.
Fix it before it becomes a problem.
#CloudSecurity #CyberSecurity #CloudRisk #M365Security #AWSSecurity
April 17, 2026 at 4:29 AM
Your cloud isn’t broken. That’s why risks go unnoticed. Access grows, permissions drift, visibility fades.
Underneath, your environment is becoming harder to control with every change.
Fix it before it becomes a problem.
#CloudSecurity #CyberSecurity #CloudRisk #M365Security #AWSSecurity
Underneath, your environment is becoming harder to control with every change.
Fix it before it becomes a problem.
#CloudSecurity #CyberSecurity #CloudRisk #M365Security #AWSSecurity
E3 vs E5 vs Business Premium—which license unlocks the security features you need?
We break it all down in our latest blog post. Link in bio.
#M365Security #MSP #Cybersecurity #Microsoft365
https://365securityassessment.com/blog/microsoft-365-security-licensing-guide
We break it all down in our latest blog post. Link in bio.
#M365Security #MSP #Cybersecurity #Microsoft365
https://365securityassessment.com/blog/microsoft-365-security-licensing-guide
May 9, 2026 at 2:02 PM
E3 vs E5 vs Business Premium—which license unlocks the security features you need?
We break it all down in our latest blog post. Link in bio.
#M365Security #MSP #Cybersecurity #Microsoft365
https://365securityassessment.com/blog/microsoft-365-security-licensing-guide
We break it all down in our latest blog post. Link in bio.
#M365Security #MSP #Cybersecurity #Microsoft365
https://365securityassessment.com/blog/microsoft-365-security-licensing-guide
NEW BLOG: The True Cost of a Microsoft 365 Security Breach for SMBs
Average SMB breach cost: $4.88M. Can your clients afford that?
Read the full article — link in bio.
#M365Security #MSP #Cybersecurity
https://365securityassessment.com/blog/cost-microsoft-365-security-breach-smb
Average SMB breach cost: $4.88M. Can your clients afford that?
Read the full article — link in bio.
#M365Security #MSP #Cybersecurity
https://365securityassessment.com/blog/cost-microsoft-365-security-breach-smb
March 26, 2026 at 2:03 PM
NEW BLOG: The True Cost of a Microsoft 365 Security Breach for SMBs
Average SMB breach cost: $4.88M. Can your clients afford that?
Read the full article — link in bio.
#M365Security #MSP #Cybersecurity
https://365securityassessment.com/blog/cost-microsoft-365-security-breach-smb
Average SMB breach cost: $4.88M. Can your clients afford that?
Read the full article — link in bio.
#M365Security #MSP #Cybersecurity
https://365securityassessment.com/blog/cost-microsoft-365-security-breach-smb
1/6: The Hidden 6-Day Delay in Microsoft's API: What We Learned from 50,000+ Entra ID Login Events 🔍
#entra, #m365, #o365, #m365security, #credentialstuffing, #bruteforce
#entra, #m365, #o365, #m365security, #credentialstuffing, #bruteforce
December 10, 2024 at 9:32 PM
1/6: The Hidden 6-Day Delay in Microsoft's API: What We Learned from 50,000+ Entra ID Login Events 🔍
#entra, #m365, #o365, #m365security, #credentialstuffing, #bruteforce
#entra, #m365, #o365, #m365security, #credentialstuffing, #bruteforce
A3 Another way is to limit agent creation to designated roles within IT or governance teams, preventing unauthorized or redundant agents from accessing sensitive data.
#CollabTalk #CyberSecurity #AccessControl #M365Security
#CollabTalk #CyberSecurity #AccessControl #M365Security
March 20, 2025 at 4:26 PM
A3 Another way is to limit agent creation to designated roles within IT or governance teams, preventing unauthorized or redundant agents from accessing sensitive data.
#CollabTalk #CyberSecurity #AccessControl #M365Security
#CollabTalk #CyberSecurity #AccessControl #M365Security
Security tip: Disable PowerShell remoting for standard users. Attackers use it for lateral movement. Only admins should have PowerShell access to M365.
#PowerShell #LateralMovement #M365Security
https://365securityassessment.com
#PowerShell #LateralMovement #M365Security
https://365securityassessment.com
April 4, 2026 at 5:03 PM
Security tip: Disable PowerShell remoting for standard users. Attackers use it for lateral movement. Only admins should have PowerShell access to M365.
#PowerShell #LateralMovement #M365Security
https://365securityassessment.com
#PowerShell #LateralMovement #M365Security
https://365securityassessment.com
Security tip: Block user consent to apps in Azure AD and route all app consent requests through admin approval. This stops OAuth phishing cold.
#AppConsent #AzureAD #M365Security
https://365securityassessment.com
#AppConsent #AzureAD #M365Security
https://365securityassessment.com
March 27, 2026 at 5:01 PM
Security tip: Block user consent to apps in Azure AD and route all app consent requests through admin approval. This stops OAuth phishing cold.
#AppConsent #AzureAD #M365Security
https://365securityassessment.com
#AppConsent #AzureAD #M365Security
https://365securityassessment.com
Unpopular opinion: Most M365 'security products' are solving problems that proper configuration already fixes.
Before buying another tool, ask yourself: Have we actually configured what Microsoft already gives us?
Secure Score tells you exactly what to do. Start there.
#M365Security #SecureScore
Before buying another tool, ask yourself: Have we actually configured what Microsoft already gives us?
Secure Score tells you exactly what to do. Start there.
#M365Security #SecureScore
February 24, 2026 at 9:02 PM
Unpopular opinion: Most M365 'security products' are solving problems that proper configuration already fixes.
Before buying another tool, ask yourself: Have we actually configured what Microsoft already gives us?
Secure Score tells you exactly what to do. Start there.
#M365Security #SecureScore
Before buying another tool, ask yourself: Have we actually configured what Microsoft already gives us?
Secure Score tells you exactly what to do. Start there.
#M365Security #SecureScore
Teams is your biggest collaboration tool—and potentially your biggest security gap.
We break it all down in our latest blog post. Link in bio.
#M365Security #MSP #Cybersecurity #Microsoft365
https://365securityassessment.com/blog/microsoft-teams-security-settings
We break it all down in our latest blog post. Link in bio.
#M365Security #MSP #Cybersecurity #Microsoft365
https://365securityassessment.com/blog/microsoft-teams-security-settings
May 19, 2026 at 2:02 PM
Teams is your biggest collaboration tool—and potentially your biggest security gap.
We break it all down in our latest blog post. Link in bio.
#M365Security #MSP #Cybersecurity #Microsoft365
https://365securityassessment.com/blog/microsoft-teams-security-settings
We break it all down in our latest blog post. Link in bio.
#M365Security #MSP #Cybersecurity #Microsoft365
https://365securityassessment.com/blog/microsoft-teams-security-settings
Healthcare orgs using M365 face unique compliance challenges. Here's your checklist.
We break it all down in our latest blog post. Link in bio.
#M365Security #MSP #Cybersecurity #Microsoft365
https://365securityassessment.com/blog/microsoft-365-hipaa-compliance
We break it all down in our latest blog post. Link in bio.
#M365Security #MSP #Cybersecurity #Microsoft365
https://365securityassessment.com/blog/microsoft-365-hipaa-compliance
April 14, 2026 at 2:02 PM
Healthcare orgs using M365 face unique compliance challenges. Here's your checklist.
We break it all down in our latest blog post. Link in bio.
#M365Security #MSP #Cybersecurity #Microsoft365
https://365securityassessment.com/blog/microsoft-365-hipaa-compliance
We break it all down in our latest blog post. Link in bio.
#M365Security #MSP #Cybersecurity #Microsoft365
https://365securityassessment.com/blog/microsoft-365-hipaa-compliance
Average SMB breach cost: $4.88M. Can your clients afford that?
We break it all down in our latest blog post. Link in bio.
#M365Security #MSP #Cybersecurity #Microsoft365
https://365securityassessment.com/blog/cost-microsoft-365-security-breach-smb
We break it all down in our latest blog post. Link in bio.
#M365Security #MSP #Cybersecurity #Microsoft365
https://365securityassessment.com/blog/cost-microsoft-365-security-breach-smb
May 4, 2026 at 2:04 PM
Average SMB breach cost: $4.88M. Can your clients afford that?
We break it all down in our latest blog post. Link in bio.
#M365Security #MSP #Cybersecurity #Microsoft365
https://365securityassessment.com/blog/cost-microsoft-365-security-breach-smb
We break it all down in our latest blog post. Link in bio.
#M365Security #MSP #Cybersecurity #Microsoft365
https://365securityassessment.com/blog/cost-microsoft-365-security-breach-smb
The average breach goes undetected for 200+ days. Know the warning signs.
We break it all down in our latest blog post. Link in bio.
#M365Security #MSP #Cybersecurity #Microsoft365
https://365securityassessment.com/blog/detect-compromised-microsoft-365-accounts
We break it all down in our latest blog post. Link in bio.
#M365Security #MSP #Cybersecurity #Microsoft365
https://365securityassessment.com/blog/detect-compromised-microsoft-365-accounts
May 24, 2026 at 2:02 PM
The average breach goes undetected for 200+ days. Know the warning signs.
We break it all down in our latest blog post. Link in bio.
#M365Security #MSP #Cybersecurity #Microsoft365
https://365securityassessment.com/blog/detect-compromised-microsoft-365-accounts
We break it all down in our latest blog post. Link in bio.
#M365Security #MSP #Cybersecurity #Microsoft365
https://365securityassessment.com/blog/detect-compromised-microsoft-365-accounts
Unpopular opinion: Most M365 'security products' are solving problems that proper configuration already fixes.
Before buying another tool, ask yourself: Have we actually configured what Microsoft already gives us?
Secure Score tells you exactly what to do. Start there.
#M365Security #SecureScore
Before buying another tool, ask yourself: Have we actually configured what Microsoft already gives us?
Secure Score tells you exactly what to do. Start there.
#M365Security #SecureScore
May 17, 2026 at 8:02 PM
Unpopular opinion: Most M365 'security products' are solving problems that proper configuration already fixes.
Before buying another tool, ask yourself: Have we actually configured what Microsoft already gives us?
Secure Score tells you exactly what to do. Start there.
#M365Security #SecureScore
Before buying another tool, ask yourself: Have we actually configured what Microsoft already gives us?
Secure Score tells you exactly what to do. Start there.
#M365Security #SecureScore
Just published: SharePoint Security Best Practices: Stop Oversharing Before It Costs You
73% of SharePoint sites have external sharing enabled by default. Is yours one of them?
Full breakdown on our blog.
#M365Security #SecurityAssessment #MSP
https://365securityassessment.com/blog/sharepoint-sec
73% of SharePoint sites have external sharing enabled by default. Is yours one of them?
Full breakdown on our blog.
#M365Security #SecurityAssessment #MSP
https://365securityassessment.com/blog/sharepoint-sec
May 17, 2026 at 2:03 PM
Just published: SharePoint Security Best Practices: Stop Oversharing Before It Costs You
73% of SharePoint sites have external sharing enabled by default. Is yours one of them?
Full breakdown on our blog.
#M365Security #SecurityAssessment #MSP
https://365securityassessment.com/blog/sharepoint-sec
73% of SharePoint sites have external sharing enabled by default. Is yours one of them?
Full breakdown on our blog.
#M365Security #SecurityAssessment #MSP
https://365securityassessment.com/blog/sharepoint-sec
NEW BLOG: Microsoft 365 Backup: Why Native Retention Is Not Enough
Microsoft's shared responsibility model means YOUR data is YOUR problem.
Read the full article — link in bio.
#M365Security #MSP #Cybersecurity
https://365securityassessment.com/blog/microsoft-365-backup-strategy
Microsoft's shared responsibility model means YOUR data is YOUR problem.
Read the full article — link in bio.
#M365Security #MSP #Cybersecurity
https://365securityassessment.com/blog/microsoft-365-backup-strategy
April 25, 2026 at 2:02 PM
NEW BLOG: Microsoft 365 Backup: Why Native Retention Is Not Enough
Microsoft's shared responsibility model means YOUR data is YOUR problem.
Read the full article — link in bio.
#M365Security #MSP #Cybersecurity
https://365securityassessment.com/blog/microsoft-365-backup-strategy
Microsoft's shared responsibility model means YOUR data is YOUR problem.
Read the full article — link in bio.
#M365Security #MSP #Cybersecurity
https://365securityassessment.com/blog/microsoft-365-backup-strategy
Hot take: MFA alone doesn't mean your M365 is secure.
I've seen tenants with MFA enabled everywhere that were still wide open because:
- No Conditional Access policies
- Legacy auth still allowed
- No device compliance requirements
- Open external sharing
MFA is step 1 of 100.
#MFA #M365Security
I've seen tenants with MFA enabled everywhere that were still wide open because:
- No Conditional Access policies
- Legacy auth still allowed
- No device compliance requirements
- Open external sharing
MFA is step 1 of 100.
#MFA #M365Security
February 25, 2026 at 9:01 PM
Hot take: MFA alone doesn't mean your M365 is secure.
I've seen tenants with MFA enabled everywhere that were still wide open because:
- No Conditional Access policies
- Legacy auth still allowed
- No device compliance requirements
- Open external sharing
MFA is step 1 of 100.
#MFA #M365Security
I've seen tenants with MFA enabled everywhere that were still wide open because:
- No Conditional Access policies
- Legacy auth still allowed
- No device compliance requirements
- Open external sharing
MFA is step 1 of 100.
#MFA #M365Security
Hot take: MFA alone doesn't mean your M365 is secure.
I've seen tenants with MFA enabled everywhere that were still wide open because:
- No Conditional Access policies
- Legacy auth still allowed
- No device compliance requirements
- Open external sharing
MFA is step 1 of 100.
#MFA #M365Security
I've seen tenants with MFA enabled everywhere that were still wide open because:
- No Conditional Access policies
- Legacy auth still allowed
- No device compliance requirements
- Open external sharing
MFA is step 1 of 100.
#MFA #M365Security
May 18, 2026 at 8:02 PM
Hot take: MFA alone doesn't mean your M365 is secure.
I've seen tenants with MFA enabled everywhere that were still wide open because:
- No Conditional Access policies
- Legacy auth still allowed
- No device compliance requirements
- Open external sharing
MFA is step 1 of 100.
#MFA #M365Security
I've seen tenants with MFA enabled everywhere that were still wide open because:
- No Conditional Access policies
- Legacy auth still allowed
- No device compliance requirements
- Open external sharing
MFA is step 1 of 100.
#MFA #M365Security
The final part in my Entra Authentication Contexts series is out! Learn how to monitor & report with KQL and a new PowerShell module, M365IdentityPosture. Gain visibility, track usage and strengthen governance.
👉 www.chanceofsecurity.com/post/masteri...
#MSEntra #PowerShell #KQL #M365Security
👉 www.chanceofsecurity.com/post/masteri...
#MSEntra #PowerShell #KQL #M365Security
Mastering Microsoft Entra Authentication Contexts - Part 4: Monitoring and Reporting with KQL & M365IdentityPosture
We’ve covered what Authentication Contexts are, why they matter, and how they help us strengthen access and data security in Microsoft 365.Now it’s time to answer the next question - how do we monito...
www.chanceofsecurity.com
November 6, 2025 at 8:56 AM
The final part in my Entra Authentication Contexts series is out! Learn how to monitor & report with KQL and a new PowerShell module, M365IdentityPosture. Gain visibility, track usage and strengthen governance.
👉 www.chanceofsecurity.com/post/masteri...
#MSEntra #PowerShell #KQL #M365Security
👉 www.chanceofsecurity.com/post/masteri...
#MSEntra #PowerShell #KQL #M365Security
🚨 Join us on Dec 12th at 1 PM for 'Spotlight: Securing your M365 config with Maester'! 🚨
🔒 Learn best practices for securing your Microsoft 365 config. 💬 The Maester core team will be present for an AMA. 📅 Save the date!
👉 tinyurl.com/maesterems
#M365Security #TechCommunity #CyberSecurity
🔒 Learn best practices for securing your Microsoft 365 config. 💬 The Maester core team will be present for an AMA. 📅 Save the date!
👉 tinyurl.com/maesterems
#M365Security #TechCommunity #CyberSecurity
Join the Microsoft EMS Community Discord Server!
Join the Enterprise Mobility + Security Community! Chat or ask questions about all things Intune, Entra or XDR! | 2239 members
tinyurl.com
November 28, 2024 at 10:00 AM
🚨 Join us on Dec 12th at 1 PM for 'Spotlight: Securing your M365 config with Maester'! 🚨
🔒 Learn best practices for securing your Microsoft 365 config. 💬 The Maester core team will be present for an AMA. 📅 Save the date!
👉 tinyurl.com/maesterems
#M365Security #TechCommunity #CyberSecurity
🔒 Learn best practices for securing your Microsoft 365 config. 💬 The Maester core team will be present for an AMA. 📅 Save the date!
👉 tinyurl.com/maesterems
#M365Security #TechCommunity #CyberSecurity
Hackers use passkey-themed phishing to bypass MFA and steal corporate data.
#PasskeyPhishing #M365Security
#PasskeyPhishing #M365Security
September 12, 2026 at 5:10 PM
Hackers use passkey-themed phishing to bypass MFA and steal corporate data.
#PasskeyPhishing #M365Security
#PasskeyPhishing #M365Security
Sat the new Microsoft AB-650 Beta exam (Administering Microsoft 365 and AI Services) yesterday.
Here is what I think:
#Microsoft365 #MicrosoftCopilot #CopilotStudio #MicrosoftPurview #M365Security #AI #CloudSecurity
Here is what I think:
#Microsoft365 #MicrosoftCopilot #CopilotStudio #MicrosoftPurview #M365Security #AI #CloudSecurity
August 18, 2026 at 9:48 AM
Sat the new Microsoft AB-650 Beta exam (Administering Microsoft 365 and AI Services) yesterday.
Here is what I think:
#Microsoft365 #MicrosoftCopilot #CopilotStudio #MicrosoftPurview #M365Security #AI #CloudSecurity
Here is what I think:
#Microsoft365 #MicrosoftCopilot #CopilotStudio #MicrosoftPurview #M365Security #AI #CloudSecurity
5. Fun thing that happened:
I asked antigravity to generate a few sets of practice questions beforehand to prep on short notice. A few questions in the exam landed right along the same core concepts!
#Microsoft365 #MicrosoftCopilot #CopilotStudio #MicrosoftPurview #M365Security #AI #CloudSecurity
I asked antigravity to generate a few sets of practice questions beforehand to prep on short notice. A few questions in the exam landed right along the same core concepts!
#Microsoft365 #MicrosoftCopilot #CopilotStudio #MicrosoftPurview #M365Security #AI #CloudSecurity
August 18, 2026 at 9:48 AM
5. Fun thing that happened:
I asked antigravity to generate a few sets of practice questions beforehand to prep on short notice. A few questions in the exam landed right along the same core concepts!
#Microsoft365 #MicrosoftCopilot #CopilotStudio #MicrosoftPurview #M365Security #AI #CloudSecurity
I asked antigravity to generate a few sets of practice questions beforehand to prep on short notice. A few questions in the exam landed right along the same core concepts!
#Microsoft365 #MicrosoftCopilot #CopilotStudio #MicrosoftPurview #M365Security #AI #CloudSecurity
🚨 I’m speaking at India Cloud Security Summit 2025! 🚨
🗓 12 July | ⏰ 5:30–6:15 PM IST
🎤 Secure your M365 tenant like a boss (admin tips you’ll thank me for)
Real-world, no-fluff advice to harden your Microsoft 365 tenant fast.
#ICSS2025 #Microsoft365 #CloudSecurity #M365Security #CyberSecurity
🗓 12 July | ⏰ 5:30–6:15 PM IST
🎤 Secure your M365 tenant like a boss (admin tips you’ll thank me for)
Real-world, no-fluff advice to harden your Microsoft 365 tenant fast.
#ICSS2025 #Microsoft365 #CloudSecurity #M365Security #CyberSecurity
June 25, 2025 at 12:25 PM
🚨 I’m speaking at India Cloud Security Summit 2025! 🚨
🗓 12 July | ⏰ 5:30–6:15 PM IST
🎤 Secure your M365 tenant like a boss (admin tips you’ll thank me for)
Real-world, no-fluff advice to harden your Microsoft 365 tenant fast.
#ICSS2025 #Microsoft365 #CloudSecurity #M365Security #CyberSecurity
🗓 12 July | ⏰ 5:30–6:15 PM IST
🎤 Secure your M365 tenant like a boss (admin tips you’ll thank me for)
Real-world, no-fluff advice to harden your Microsoft 365 tenant fast.
#ICSS2025 #Microsoft365 #CloudSecurity #M365Security #CyberSecurity