If there’s one lever MSPs should be pulling right now, it’s this: AI is your fast track to relevance in the C-suite and specialization in your services. For years, MSPs have struggled to break out of the cost center box. Security conversations are often dismissed unless there is a breach. Productivity talks get buried under […]
In March 2023, Microsoft announced the deprecation of managing authentication methods in the legacy multifactor authentication and self-service password reset (SSPR) policies. Beginning September 30, 2025, authentication methods can’t be managed in these legacy MFA and SSPR policies. In this article, I will be breaking down these changes so you understand how to prepare with […]
Earlier this year, Microsoft made the E5-Security add-on available for Business Premium subscribers. It’s packed with a ton of amazing security features. Additionally, it is a significantly reduced price than if you were to upgrade to E5 altogether. In this article, I will share the highlights of what is included with the add-on. What’s Included […]
Risky user detections are one of the leading indicators of account compromise in Microsoft 365. By default, you will not get alerted as an MSP for a new risky user. I just talked to an MSP last week who had a client that wired 500k to a fraudulent bank account after the user account was […]
I recently did a webinar on Token theft where I broke down one of the fastest growing attacks: Token theft via AiTM phishing. In this article, I will summarize that webinar and provide my top protections to both prevent and mitigate this type of attack. Understanding the Kill Chain Token theft via AiTM is performed […]
In this post, we’ll explore how the Australian Cyber Security Centre’s Essential Eight framework maps directly to Microsoft 365 security controls—and how you can automate evidence collection and policy checks across your tenant. Today, we’ll: Walk through each of the eight mitigation strategies Show the Microsoft 365 tools and licensing needed to implement them Highlight […]
In a previous post, I walked you through an incident response playbook for Token Theft via AiTM. This playbook can be leveraged for BEC incidents as well. Today’s deep dive is going to look at proactive protections you can put into place to PREVENT these attacks altogether. We will be focusing on Conditional Access Policies […]
Microsoft is currently in preview with a new session attribute in Conditional Access policies that Requires token protection for sign-ins. Full Details: Microsoft Entra Conditional Access token protection explained – Microsoft Entra ID | Microsoft Learn Microsoft recently changed the licensing requirement to make this available in Entra ID P1 licensing. With that said, there are […]
Token theft is one of the fastest growing attack methods. Lately, I talk to one customer or MSP a week that has had some form of breach that involved this attack which extended into business email compromise. In today’s post, I am going to provide you my recommended incident response playbook that you can leverage […]
Have you ever opened a seemingly harmless Word document, only to have it trigger a script that could have encrypted your entire device? What saved you from disaster? It could very well have been an invisible defense mechanism you didn’t even know existed—Attack Surface Reduction (ASR) rules in Microsoft 365. In this blog post, we’ll […]
As organizations become more dependent on third-party applications, managing and securing these apps has become increasingly complex. If you’re looking for a streamlined solution to manage and update these applications, you’re in the right place. In this blog post, I’ll walk you through how you can leverage Microsoft Defender and Microsoft Intune to remediate software […]
If your organization manages macOS devices, enabling continuous security monitoring is critical—especially with rising threats targeting all endpoints. Microsoft Defender for Endpoint provides 24/7 active vulnerability scanning for macOS, but setup requires several key steps. Here’s a high-level overview to help IT teams get started and scale deployment through automation. 🔧 Prerequisites & Setup Strategy […]
