KDKajal Dhanjalinkajalbuilds.hashnode.dev·5d ago · 12 min readAnatomy of an identity compromiseWhy nothing fired When a detection misses, the first instinct is to blame the rule. Wrong threshold, wrong table, wrong logic. Sometimes that is exactly right. But there is a class of intrusion where 00
LTLưu Tuấn Anhinblog.fiscybersec.com·Aug 6 · 16 min readYou Connect to Hotel Wi-Fi, Attacker Logs into Microsoft 365 Account — Without You Clicking AnythingOverview Imagine this scenario: you just checked in to your hotel after a long flight, opened your laptop, turned on Wi-Fi, opened Chrome, and Chrome automatically opened the Microsoft 365 sign-in pag00
VNVũ Nhật Lâminblog.fiscybersec.com·Jul 28 · 9 min readEvilTokens and "Ghost Phishing": The Microsoft 365 Attack That Only Materializes Inside the BrowserEvilTokens, a phishing-as-a-service (PhaaS) kit that surfaced in mid-February 2026, chains two techniques that together defeat both static URL scanning and multi-factor authentication. The phishing HT00
MSManu Shuklainecorpit.hashnode.dev·Jul 16 · 15 min readMicrosoft 365 prices rise on 1 July 2026: every enterprise suite goes up exactly $3Microsoft 365 prices rise on 1 July 2026: every enterprise suite goes up exactly $3 Summary. Microsoft's commercial price update took effect on 1 July 2026, announced by Corporate Vice President Nicol00
4F404 Foundersin404-founders.com·Jul 13 · 5 min readEntra Passkey Vishing Hijacks Microsoft 365 AccessA threat cluster is calling employees, walking them through what looks like a routine Microsoft passkey setup, and walking away with full access to their Microsoft 365 account - no password stolen, no00
SSapotaCorpinsapotacorpvn.hashnode.dev·Jul 12 · 9 min readMicrosoft 365 Consulting Services Buyer's Guide 2026A CIO at a mid-market enterprise inherits a stalled Microsoft 365 rollout. The consultant hired in week 1 pitched comprehensive M365 capability. By month 6, the productivity apps work but the Power Pl00
DGDavid Grauintheaishift.io·Jun 18 · 3 min readCopilot Cowork Is GAFor the last few years AI has handed us drafts. Cowork hands back finished work and that changes the question from "will people use it?" to "what do we trust it to own?" Most AI at work still follows00
SCSuvankar Chakrabortyinsuvankariam.hashnode.dev·May 16 · 14 min readZero Trust Is Not a Product — It Is an Architecture By Suvankar Chakraborty | Principal Engineer — IAM & IT OperationsPublished on LinkedIn · Medium · HashnodeTags: #ZeroTrust #IAM #AzureAD #EntraID #CyberSecurity #ITOperations #IdentityArchitecture Th00
Rrnitsinrnits-it.hashnode.dev·May 2 · 12 min readDisabled AD Users Still Active in Entra? The Source Anchor GotchaThe first sign was a license report. A 100-user professional services firm in Massachusetts ran a routine quarterly check on their Microsoft 365 spend. The number did not match the headcount. There were nineteen active, licensed users in Entra ID who...00
FMFrancesco Minghettiinfrancescominghetti.hashnode.dev·Apr 29 · 10 min readClaude Inside Microsoft 365 Copilot: What Actually Changes for European CompaniesMicrosoft 365 · Enterprise AI · Governance TL;DR Since January 2026, Claude models from Anthropic are Microsoft subprocessors and selectable inside M365 Copilot, Researcher, Copilot Studio, and the W00