Topic tag

Microsoft 365

3 articles tagged Microsoft 365. Browse the full archive or jump to all posts.

Token theft is the new credential stuffing, and CISA plus NIST just published the detection playbook

September 20, 2026 · 13 min read

Token theft is the new credential stuffing, and CISA plus NIST just published the detection playbook

CISA and NIST released IR 8587 on 15 September 2026 on cloud identity token theft. Microsoft's matching research shows what most tenants never log.

Read more →
Swiss government lost 200 accounts in a SharePoint breach

August 9, 2026 · 11 min read

Swiss government lost 200 accounts in a SharePoint breach

Around 200 accounts walked out of a Swiss federal SharePoint on 6 August. The failure was permission sprawl. The audit to run on your tenant today.

Read more →
The 3-second Microsoft 365 hijack nobody saw coming, and what to do if your staff already clicked

July 5, 2026 · 12 min read

The 3-second Microsoft 365 hijack nobody saw coming, and what to do if your staff already clicked

A new phishing technique steals Microsoft 365 sessions in about 3 seconds flat, no password required. If someone in your office clicked something weird today, here is what to check tonight.

Read more →