Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

How Hackers Steal Your Microsoft 365 Session | Sophos Threat Case

Nov 3, 2026 By Sophos In Sophos
Most phishing attacks go after credentials. Evil Tokens targets something more powerful: an already authenticated Microsoft 365 session. Watch Marlene Jones break down how session theft works and how Sophos MDR stopped this real-world attack before the stolen token could be abused.
View Video
acronis

Attackers don't need costumes when they can log in to Microsoft 365

Oct 29, 2026 By Acronis Editorial Team In Acronis
Halloween is full of disguises, but a cyberattacker does not need a costume to get inside a Microsoft 365 environment. A stolen password or malicious app consent can be enough. From there, the intruder may appear to be an ordinary user doing ordinary work. That is what makes identity compromise so unsettling: The front door can look perfectly familiar. Phishing can trick users into sharing credentials or granting access.
Read Post
CrowdStrike

Falcon Data Security for SaaS Secures Sensitive Data in Microsoft 365

Oct 5, 2026 By Dana Larson In CrowdStrike
For many organizations, Microsoft 365 environments are essential to data security strategy. Their strategic plans live in SharePoint; their employee records and customer data are stored in OneDrive. Teams use these tools to collaborate on projects every day, and increasingly, AI tools like Microsoft Copilot can access the information they rely on.
Read Post
knowbe4

Phishing Emails Use New Technique to Bypass Microsoft 365 Security Filters

Sep 15, 2026 By KnowBe4 Team In KnowBe4
Threat actors are using phishing emails with blank SMTP sender fields to bypass Microsoft 365 security filters, according to researchers at ReliaQuest. Microsoft 365 Exchange Online uses a feature called “RejectDirectSend” to block unauthenticated Direct Send emails from an organization’s trusted domain. If an attacker omits the domain field from these emails, however, RejectDirectSend will no longer block the messages.
Read Post
keep

How to configure Microsoft 365 for maximum security

Sep 15, 2026 By Keep Information Security Services In KEEP
If someone wanted to cause serious damage to your organisation, where would they start? Not with your filing cabinets. Not with your server room. They’d probably start with your Microsoft 365 tenant, because that’s where your emails, files and customer data live, and where your entire operation runs. Thankfully, Microsoft 365 comes with powerful security capabilities built in. However, having those capabilities and being protected by them are two different things.
Read Post
miniorange

How Conditional Access Protects Microsoft 365 Apps From Unmanaged Devices

Sep 3, 2026 By Chaitali Avadhani In miniOrange
Your sales representative logged into Outlook from a coffee shop laptop that isn't enrolled, isn't encrypted, and hasn't seen a security patch in eight months. Should Microsoft 365 let that sign-in through just because the password was correct? That single question is why conditional access exists. Passwords tell you who someone claims to be. They say nothing about whether the device behind that login is safe to trust with your company's email, SharePoint files, or Teams chats.
Read Post
Octiga

The Evolution of Octiga Is Coming

Sep 3, 2026 By Alex Araujo In Octiga
Over the past several years, we've had thousands of conversations with MSPs about Microsoft 365 security. We've listened to what works, what doesn't, and how managing security across multiple customer environments can become difficult. One thing has become increasingly clear: Microsoft continues to add more powerful security capabilities, while MSPs continue to manage more customers, more users, and more complex environments.
Read Post
keep

What are the benefits of Microsoft 365 consultancy?

Sep 1, 2026 By Keep Information Security Services In KEEP
Microsoft 365 is one of the most widely used business platforms in the world. However, most businesses use only a fraction of what it offers, and leave some of its most important security features either switched off or set up incorrectly. M365 offers far more than the productivity tools we are all familiar with, like Outlook, Word, PowerPoint and Excel. Used properly, it’s a powerful cybersecurity platform. Used poorly, it offers a false sense of protection.
Read Post
Octiga

M365 security was designed to manage one tenant... MSPs manage more.

Aug 28, 2026 By Alex Araujo In Octiga
Microsoft 365 has no shortage of security features. Conditional Access, Defender, Intune, MFA, mailbox controls, identity management, and more give MSPs plenty of tools to secure their customers. What we do (or rather, don’t do) with these tools is what causes issues. These tools and settings must be configured correctly across every tenant, and we need to be sure they stay that way.
Read Post
Deploying Microsoft 365 Policy Management in Complex Environments

Deploying Microsoft 365 Policy Management in Complex Environments

Aug 3, 2026 By SecuritySenses In SecuritySenses
Achieving regulatory compliance across a modern enterprise requires a reliable strategy for Microsoft 365 policy management. In complex organizational structures, simply storing documents in cloud libraries is not enough; organizations must actively distribute, track, and verify that critical policies are read and acknowledged. Implementing purpose-built Microsoft 365 policy management ensures your compliance processes transition from passive document storage to an automated, audit-ready policy management system natively integrated into your existing workspace.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.