Imagine you had a window in your house with a broken lock. Anyone could open it and climb right in. Now imagine your neighbor posts about it on Next Door for everyone to see. Would you quickly try to fix the lock? Most likely! This is the same mindset we need when managing software vulnerabilities […]
If you’ve ever used your Microsoft 365 credentials to log in to a third-party app or set up a workflow integration, then congratulations — you’ve interacted with an OAuth application. These apps are everywhere in modern cloud environments, and while they enable powerful integrations and automation, they can also introduce significant risk if left unchecked. […]
Managing a software application inventory for a business can feel overwhelming. With the rapid proliferation of SaaS tools, lack of governance, and users signing up for applications on their own, businesses face serious security and compliance risks. If software applications aren’t properly tracked and secured, organizations risk data leaks, unauthorized access, and exposure to security […]
How many of you can confidently say that your business maintains a centralized and approved application inventory? If you’re like most organizations, the answer is either “no” or “we have one, but it’s incomplete.” And honestly, that’s not entirely your fault. With the rise of SaaS tools, ease of access, and the ability for employees […]
In today’s security landscape, retaining audit and sign-in logs for an extended period is crucial for effective threat detection and incident response. Unfortunately, the default data retention periods for Entra (formerly Azure AD) logs are often too short—particularly for businesses looking to investigate security breaches that might have occurred outside of our default 30-day retention. […]
Some of you out there might be thinking, “not another article on the end of passwords, we’ve been listening to this for years.” And to your credit, you are spot on. People have been telling a tale of the end of passwords for at least 5 years now, largely becoming a more popular tale with […]
If you want to provide secure access to your corporate data on personal smart phones without enrolling that device under full IT management, stay tuned because in this article, I am going to show you the exact policies you need to configure to protect your organization. Access on the Go When we think about users […]
Did you know that users outside your organization can initiate Teams chats with other members of your team by default in Microsoft 365? Attackers are leveraging this to conduct sophisticated phishing attacks in Teams, impersonating a help desk to trick users into compromising their accounts or devices. In today’s article, I am going to show […]
If Microsoft 365 security feels very ad hoc and reactive to you today, stay tuned because in this blog I am going to show you a tool I built that allows you to scale your cybersecurity practice to focus on the preventative while also reducing your assessment time from hours or days to just minutes. […]
When it comes to data protection, we usually throw out all of our security protections when external collaboration and guest users are added to the mix. Guest users can: Download files locally Access sensitive documents on insecure devices Do not even need to prove their identity (by default, setting dependent) In this article, I am going […]
By default in Microsoft 365 Users can register or join any device into your active device inventory in Entra. Additionally, a common method of maintaining persistence for hackers is to join a device to entra after initial user compromise to maintain persistence. In today’s article, I am going to show you my top policies for […]
Allowing users to access resources from any device is the equivalent of an airline company like United saying, “you know what, we are just going to let our pilots fly any plane they want. We don’t know if it is up to code. We don’t really know who is on the plane but they can […]
