Social engineering attack in which fake emails or websites that look legitimate trick people into revealing credentials or other sensitive information or into installing malware.
Defender for Office 365 is more than antivirus for email; it protects email, Teams, SharePoint and OneDrive against phishing, malicious links and malware. · Microsoft Defender for Office 365 - Simply…
Five attack paths: Teams phishing posing as IT support, device code vishing, malicious OAuth consent, SharePoint anyone-with-the-link exfiltration and adversary-in-the-middle token theft. · Stop Teams Phishing and Social Engineering in…
Modern phishing emails copy real branding and writing styles, so a basic spam filter no longer keeps a business safe. This episode is for Microsoft 365 admins, security teams and business owners. You learn how the five protection layers of Microsoft Defender…
This episode plays out like a cybercrime thriller, exposing how today’s most dangerous breaches don’t smash doors—they’re invited inside. The investigation opens with a single click on January 12th. A polished phishing email doesn’t steal a password; it…
Your phishing dashboard is lying to you. The “all good” charts hide near-miss clicks, silent investigations, and active campaigns threading your inboxes right now. We show how to tap Microsoft Defender’s buried signals and build living Power BI dashboards…
Your Microsoft 365 tenant might already be compromised—and your MFA is effectively useless because of one misconfiguration you’ve probably left on. In this episode, the Office of Corrective Doctrine walks you through five brutal real-world attack paths inside…
Passwords and one-time codes can still be phished, and Microsoft is now making passkeys the default sign-in for Microsoft 365. This Simply Explained episode is for everyday users and IT admins who want to understand passkeys and FIDO2 without the jargon. You…
Your “intern” just became your scariest, smartest coworker—and it’s made of code. In this episode, we unpack how Microsoft Security Copilot is quietly turning traditional Security Operations Centers into AI-driven defense factories. Forget drowning in alerts…
Learn SC-900 cybersecurity fundamentals, including Zero Trust, identity, compliance, and Microsoft security concepts for protecting modern cloud environments.
Use Defender for Cloud to improve multicloud security posture, protect workloads, map compliance, detect threats, recommendations, and remediate risks.
Your users still click phish—even with Defender for M365 “fully enabled.” The culprit isn’t the attackers; it’s misaligned layers: Safe Links, Safe Attachments, anti-phishing ML, and mail flow rules that overlap, conflict, or leave gaps. This guide traces how…
MFA is not your shield – it’s already broken. In this episode, we walk the bridge of a real M365 tenant breach, step-by-step, from the attacker’s cockpit to your shattered inbox. You’ll hear how one phishing click plus an AitM proxy and a “benign” OAuth app…
Identity is the real border now. In Microsoft cloud the firewall is no longer the decisive wall — Entra ID is. Modern attackers don’t smash doors; they log in using harvested, phished, or purchased credentials. That’s why a password-only world is effectively…
Every Microsoft 365 tenant already has email protection, but few admins know where it stops. This episode breaks down Exchange Online Protection's three filtering layers, the zero-hour auto purge safety net and the gaps attackers exploit. Small and mid-sized…
Beyond the Prompt: Why MFA Isn't Enough to Protect Your Data · Mirko Peters Welcome back, security enthusiasts! If you are anything like me, you probably remember the collective sigh of relief the tech community breathed when multi-factor a…
Breaking Down the M365 Attack Chain: What You Need to Know · Mirko Peters Welcome back to the podcast blog! If you have been following our recent audio episodes, you know we have been diving deep into cloud security, threat landscapes, an…
Risk Signals for Fraud Detection · Mirko Peters Discover how risk signals improve fraud detection by combining identity, behavior, device, and transaction context for faster, more accurate decisions.
Microsoft 365 Consent Phishing · Mirko Peters Learn how Microsoft 365 consent phishing bypasses traditional MFA defenses, abuses OAuth permissions, and how to detect and prevent it.
It is a cloud-based security service that protects email, calendar and documents, plus Teams, SharePoint and OneDrive, from phishing, malicious links and malware. It is not a separate app you install. · From the episode: Microsoft Defender for Office 365 - Simply…
Response time, dwell time and high-risk entities, plus who clicked, who reported and how fast you contained the threat. These tie phishing metrics to business outcomes rather than vanity counts of blocked mail. · From the episode: Build Better Phishing Reports with Defender…
Short info above, community knowledge below: add practical tips, examples or corrections. New contributions are reviewed first; trusted members publish directly.
Experts and companies for this topic
Nobody has listed this topic yet. Add it to your profile.
EN
Deutsch
Español
Français
Italiano
Português
Nederlands
Polski
Bahasa Indonesia
Русский
Українська
العربية
עברית
日本語
한국어