I recently did a webinar on Token theft where I broke down one of the fastest growing attacks: Token theft via AiTM phishing. In this article, I will summarize that webinar and provide my top protections to both prevent and mitigate this type of attack. Understanding the Kill Chain Token theft via AiTM is performed […]
In this weeks article of T-Minus365, I sat down with Allan and Brian from Agilitec IT, a forward-thinking MSP based in Las Vegas (and recent winners of the Pax8 Partner Hall of Fame Award at Beyond) that’s rewriting the rules for how service providers engage, operate, and deliver value. What started as a traditional managed service […]
Below are all of the latest feature updates coming to Microsoft 365 Automated Security Assessments mapped to the CIS Controls CloudCapsule is a tool I’ve been working on over the past year that automates your M365 security assessments against the CIS Controls. I started CloudCapsule because I saw the need to streamline the assessments of Microsoft 365 tenants […]
In this post, we’ll explore how the Australian Cyber Security Centre’s Essential Eight framework maps directly to Microsoft 365 security controls—and how you can automate evidence collection and policy checks across your tenant. Today, we’ll: Walk through each of the eight mitigation strategies Show the Microsoft 365 tools and licensing needed to implement them Highlight […]
In a previous post, I walked you through an incident response playbook for Token Theft via AiTM. This playbook can be leveraged for BEC incidents as well. Today’s deep dive is going to look at proactive protections you can put into place to PREVENT these attacks altogether. We will be focusing on Conditional Access Policies […]
Below are all of the latest feature updates coming to Microsoft 365 Automate your Microsoft Security Assessments CloudCapsule is a tool I’ve been working on over the past year that automates your M365 security assessments against the CIS Controls. I started CloudCapsule because I saw the need to streamline the assessments of Microsoft 365 tenants to a […]
Microsoft is currently in preview with a new session attribute in Conditional Access policies that Requires token protection for sign-ins. Full Details: Microsoft Entra Conditional Access token protection explained – Microsoft Entra ID | Microsoft Learn Microsoft recently changed the licensing requirement to make this available in Entra ID P1 licensing. With that said, there are […]
Today’s article is going to be a little different than usual. While I’ve worked for a few MSPs and actively consult on a weekly basis, I think its important to hear strategies and struggles from MSPs who are in the weeds looking to develop a better security practice that involves Microsoft 365 tools. So for […]
Token theft is one of the fastest growing attack methods. Lately, I talk to one customer or MSP a week that has had some form of breach that involved this attack which extended into business email compromise. In today’s post, I am going to provide you my recommended incident response playbook that you can leverage […]
Have you ever opened a seemingly harmless Word document, only to have it trigger a script that could have encrypted your entire device? What saved you from disaster? It could very well have been an invisible defense mechanism you didn’t even know existed—Attack Surface Reduction (ASR) rules in Microsoft 365. In this blog post, we’ll […]
As organizations become more dependent on third-party applications, managing and securing these apps has become increasingly complex. If you’re looking for a streamlined solution to manage and update these applications, you’re in the right place. In this blog post, I’ll walk you through how you can leverage Microsoft Defender and Microsoft Intune to remediate software […]
Below are all of the latest feature updates coming to Microsoft 365 Automated Security Assessments mapped to the CIS Controls CloudCapsule is a tool I built that automates your M365 security assessments against the CIS Controls. I started CloudCapsule because I saw the need to streamline the assessments of Microsoft 365 tenants to a trusted standard like […]
