Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Microsoft 365 Token-Replay Attacks: Defending Against AitM Session Hijacking and Credential Theft
Introduction In early October 2026, security researchers at Huntress disclosed a widespread campaign targeting Microsoft 365 environments. B...
Microsoft Project Perception and Guardian Agents: A Defender's Guide to Containing AI Agents as Insider Threats
AI Agents Are the New Insider Threat — and Your SOC Isn't Watching Them Microsoft's newly revealed Project Perception — which introduces Gua...
Microsoft's AI Agent Security Framework: Treating Autonomous Agents as Insider Threats — Detection and Hardening Guide
Introduction Microsoft has formally shifted the conversation on AI security from theoretical risk to operational reality. In a newly publish...
ConnectWise Cloud Backup Suspended After M365 Tenant Compromise — Hunting Malicious OAuth App Identities in Your Tenant
ConnectWise Suspends Cloud Backup After Application Identity Compromise ConnectWise disclosed on Saturday that unknown threat actors gained ...
Securing AI Agents From the Outside In: A Defender's Playbook for the New Privileged User
Introduction For two decades, identity and access management programs have been built around a single assumption: the privileged user is a p...
ASOS Breach: How a Single Compromised SaaS Identity Becomes a Network Intrusion — Detection and Hardening Guide
Introduction The breach at British online retailer ASOS is the latest proof point for a pattern we've been tracking across IR engagements fo...
EvilTokens PhaaS Takedown: Defending Entra ID Against Device Code Phishing and Token Theft
What Happened Microsoft's Digital Crimes Unit (DCU), working with industry partners, has facilitated a disruption of infrastructure belongin...
OAuth Consent Abuse: Why MFA Isn't Enough — Detection and Remediation Guide for Entra ID
Introduction Multi-factor authentication has become the default answer to identity attacks — and for password-based credential theft, it rem...
ShinyHunters Passkey Phishing Campaign Targets Microsoft 365: Detection and Defense Guide for SSO Social Engineering Attacks
Introduction Microsoft has confirmed that threat actors affiliated with ShinyHunters, Helix, and other extortion-focused criminal groups are...