Many of us have set up a geo-blocking conditional access policy to prevent sign ins from unapproved countries. If you haven’t already, look to implement this as it gives you great protection against potentially malicious sign ins. This policy inevitably creates a support burden when users are traveling to a country that is not approved […]
In today’s digital landscape, securing local admin accounts is paramount. Mismanagement of these accounts can lead to severe security breaches, compromising sensitive data and systems. What are your standards when it comes to managing local admin passwords and accounts? This article outlines best practices for managing these accounts and passwords securely, alongside effective troubleshooting, preventative, […]
Below are all of the latest feature updates coming to Microsoft 365 Automated Security Assessments mapped to the CIS Controls I am excited to announce the soft-launch of an automated tool, CloudCapsule, I’ve been working on over the past year that automates your M365 security assessments against the CIS Controls. I started CloudCapsule because I saw […]
Securing SharePoint Online is a multi-layered approach and can get highly complex due to the nature of permissions. I would say most of the settings in SharePoint online are not secure by default so I wanted to write this article to show you how to lock down some of the default sharing policies for links […]
Image Generated by Copilot 🙂 I get a lot of questions around best practices for break glass accounts in Microsoft 365 so wanted to document them in this article. To avoid locking yourself out of your Microsoft account, its advised (from Microsoft) to create 2 break glass accounts, one of which is excluded from all […]
As cybersecurity insurance continues to evolve, I believe we are going to continue to see stricter requirements in reporting as it relates to common questionnaire topics such as organizations requiring MFA. Self-attestation will not be enough for most insurance providers out there in my opinion. As Microsoft MFA has evolved over the years, reporting has […]
Below are all of the latest feature updates coming to Microsoft 365 Automated Security Assessments mapped to the CIS Controls I am excited to announce the soft-launch of an automated tool, CloudCapsule, I’ve been working on over the past year that automates your M365 security assessments against the CIS Controls. I started CloudCapsule because I saw […]
In a previous article, I discussed initial user compromise with cookie hijacking and the subsequent attacks we could see after. This week, I wanted to zoom in on persistence techniques and talk about the common methods we see in Microsoft 365 today. I also pair these with recommended security baselines (mapped to the CIS Controls) […]
In previous articles, I’ve talked about how Passkeys are one of the strongest forms of MFA that you could roll out in an organization given that they are considered phishing resistant and can protect us against threats like a man in the middle attack. It’s unlikely that many of us have reached a maturity level […]
In this guide, we’ll explore how you can leverage Azure Key Vault to securely manage secrets in your single-tenant or multi-tenant PowerShell scripts. This will enable you to securely access authentication tokens and other sensitive information needed to interact with downstream customer environments. Let’s dive in! Understanding the Secure Application Model Many of us are […]
Below are all of the latest feature updates coming to Microsoft 365 Editable Versions available If you would like editable versions of this documentation so that you can white-label it and send to end users, there is a monthly subscription you can sign up for to obtain this content as well as in depth guides […]
MFA methods have evolved greatly over the years to accommodate shifts in the attack surface as well as new attack methods. In this article, I wanted to cover the evolution of MFA and highlight how different types of MFA can still leave your users exposed. This includes common attack methods and how to overcome them […]
