https://www.m365.fm/entity/phishing/Social engineering attack in which fake emails or websites that look legitimate trick people into revealing credentials or other sensitive information or into installing malware.enhttps://www.m365.fm/show/episodes/passkeys-and-fido2/https://www.m365.fm/show/episodes/passkeys-and-fido2/Wed, 28 Oct 2026 00:00:00 -0000episodePasswords and one-time codes can still be phished, and Microsoft is now making passkeys the default sign-in for Microsoft 365. This Simply Explained episode is for everyday users and IT admins who want to understand passkeys and FIDO2 without the jargon. You…https://www.m365.fm/community/u/mirko-p/blog/do-you-need-antivirus-with-microsoft-365/https://www.m365.fm/community/u/mirko-p/blog/do-you-need-antivirus-with-microsoft-365/Thu, 15 Oct 2026 22:31:00 -0000articleFind out whether Microsoft 365's built-in protection is enough or if you still need antivirus, with practical guidance for admins and IT leaders.https://www.m365.fm/community/u/mirko-p/blog/beyond-the-prompt-why-mfa-isnt-enough-to-protect-your-data/https://www.m365.fm/community/u/mirko-p/blog/beyond-the-prompt-why-mfa-isnt-enough-to-protect-your-data/Fri, 28 Aug 2026 13:40:04 -0000articleWelcome back, security enthusiasts! If you are anything like me, you probably remember the collective sigh of relief the tech community breathed when multi-factor a…https://www.m365.fm/community/u/mirko-p/blog/breaking-down-the-m365-attack-chain-what-you-need-to-know/https://www.m365.fm/community/u/mirko-p/blog/breaking-down-the-m365-attack-chain-what-you-need-to-know/Fri, 28 Aug 2026 13:37:24 -0000articleWelcome back to the podcast blog! If you have been following our recent audio episodes, you know we have been diving deep into cloud security, threat landscapes, an…https://www.m365.fm/community/u/mirko-p/blog/bypassing-microsoft-365-defenses-the-evolution-of-ai-driven-phishing/https://www.m365.fm/community/u/mirko-p/blog/bypassing-microsoft-365-defenses-the-evolution-of-ai-driven-phishing/Fri, 28 Aug 2026 13:32:54 -0000articleWelcome back to the podcast companion blog. Today, we are diving deep into the technical weeds of how modern threat actors are managing to slip past the default sec…https://www.m365.fm/community/u/mirko-p/blog/beyond-email-protocols-why-spf-dkim-and-dmarc-arent-enough-against-deepfakes/https://www.m365.fm/community/u/mirko-p/blog/beyond-email-protocols-why-spf-dkim-and-dmarc-arent-enough-against-deepfakes/Wed, 26 Aug 2026 11:55:15 -0000articleWhen it comes to securing corporate inboxes, organizations have long relied on standard email authentication protocols as their primary shield. If you have spent an…https://www.m365.fm/community/u/mirko-p/blog/stop-phishing-in-its-tracks-why-multi-factor-authentication-is-your-best-defense/https://www.m365.fm/community/u/mirko-p/blog/stop-phishing-in-its-tracks-why-multi-factor-authentication-is-your-best-defense/Wed, 12 Aug 2026 16:36:38 -0000articleWelcome back to the podcast blog! If you are a regular listener, you know we talk a lot about identity and access management. Recently, we dropped an absolute must-…https://www.m365.fm/community/u/mirko-p/blog/say-goodbye-to-hard-coded-secrets-with-azure-managed-identities/https://www.m365.fm/community/u/mirko-p/blog/say-goodbye-to-hard-coded-secrets-with-azure-managed-identities/Wed, 12 Aug 2026 15:56:19 -0000articleWelcome back to the blog! If you have been keeping up with our podcast, you know we are constantly looking at ways to make cloud infrastructure more secure, resilie…https://www.m365.fm/community/u/mirko-p/blog/implementing-passkeys-in-microsoft-entra-id-a-practical-guide/https://www.m365.fm/community/u/mirko-p/blog/implementing-passkeys-in-microsoft-entra-id-a-practical-guide/Wed, 12 Aug 2026 11:11:29 -0000articleImplementing Passkeys in Microsoft Entra ID: A Practical Guide Welcome back to the podcast and our companion blog! If you have ever stared blankly at a login scree…https://www.m365.fm/community/u/mirko-p/blog/why-set-and-forget-fails-treating-microsoft-defender-as-a-living-system/https://www.m365.fm/community/u/mirko-p/blog/why-set-and-forget-fails-treating-microsoft-defender-as-a-living-system/Tue, 11 Aug 2026 16:00:43 -0000articleWelcome back to the podcast and our ongoing deep dives into securing your cloud environment. If you have ever felt that sinking feeling when a sophisticated phishin…https://www.m365.fm/show/episodes/microsoft-defender-for-office-365-simply-explained/https://www.m365.fm/show/episodes/microsoft-defender-for-office-365-simply-explained/Wed, 22 Jul 2026 00:00:00 -0000episodeModern phishing emails copy real branding and writing styles, so a basic spam filter no longer keeps a business safe. This episode is for Microsoft 365 admins, security teams and business owners. You learn how the five protection layers of Microsoft Defender…https://www.m365.fm/show/episodes/exchange-online-protection-eop-simply-explained/https://www.m365.fm/show/episodes/exchange-online-protection-eop-simply-explained/Wed, 22 Jul 2026 00:00:00 -0000episodeEvery Microsoft 365 tenant already has email protection, but few admins know where it stops. This episode breaks down Exchange Online Protection's three filtering layers, the zero-hour auto purge safety net and the gaps attackers exploit. Small and mid-sized…https://www.m365.fm/community/u/mirko-p/blog/security-mistakes-to-avoid-protecting-your-digital-and-physical-environments/https://www.m365.fm/community/u/mirko-p/blog/security-mistakes-to-avoid-protecting-your-digital-and-physical-environments/Thu, 21 May 2026 13:32:11 -0000articleIt only takes one small mistake—clicking a suspicious link or forgetting to update your software—for your data or business to be at risk. In today&rsquo…https://www.m365.fm/community/u/mirko-p/blog/secure-chat-practices-essential-principles-for-protected-communication/https://www.m365.fm/community/u/mirko-p/blog/secure-chat-practices-essential-principles-for-protected-communication/Thu, 21 May 2026 13:23:25 -0000articleKeeping conversations secure isn't just a nice-to-have—it's a must in today’s world. With sensitive data flying back and forth in industries like health…https://www.m365.fm/community/u/mirko-p/blog/protecting-against-phishing-in-teams-comprehensive-strategies-for-microsoft-teams-security/https://www.m365.fm/community/u/mirko-p/blog/protecting-against-phishing-in-teams-comprehensive-strategies-for-microsoft-teams-security/Thu, 21 May 2026 13:16:53 -0000articleIf you depend on Microsoft Teams every day, you're probably dealing with more than just chat messages and virtual meetings. Phishing attacks are increasingly showin…https://www.m365.fm/community/u/mirko-p/blog/threat-protection-in-teams-safeguarding-collaboration-in-a-modern-workforce/https://www.m365.fm/community/u/mirko-p/blog/threat-protection-in-teams-safeguarding-collaboration-in-a-modern-workforce/Thu, 21 May 2026 10:48:16 -0000articleThreat protection in Microsoft Teams isn’t just a trendy topic—it’s a real-world issue for businesses navigating the challenges of a digital-first…https://www.m365.fm/community/u/mirko-p/blog/secure-device-usage-essential-guide-for-safer-work-and-home-technology/https://www.m365.fm/community/u/mirko-p/blog/secure-device-usage-essential-guide-for-safer-work-and-home-technology/Thu, 21 May 2026 10:44:54 -0000articleIn a world where every device seems to buzz, ping, or glow at you, securing your tech is more than just a good habit—it’s a basic requirement. From smar…https://www.m365.fm/community/u/mirko-p/blog/preventing-data-leaks-in-teams-strategies-for-secure-collaboration/https://www.m365.fm/community/u/mirko-p/blog/preventing-data-leaks-in-teams-strategies-for-secure-collaboration/Wed, 20 May 2026 12:20:02 -0000articleData leaks aren’t just IT headaches—they’re one of the fastest ways to put your organization’s trust, reputation, and even bottom line on th…https://www.m365.fm/community/u/mirko-p/blog/meeting-security-features-complete-guide-to-securing-virtual-collaboration/https://www.m365.fm/community/u/mirko-p/blog/meeting-security-features-complete-guide-to-securing-virtual-collaboration/Wed, 20 May 2026 12:13:32 -0000articleVirtual meetings have become the beating heart of modern collaboration, but with that convenience comes a whole set of new risks. Hackers, data leaks, and reputatio…https://www.m365.fm/community/u/mirko-p/blog/insider-threat-detection-scenarios-real-world-cases-and-best-practices/https://www.m365.fm/community/u/mirko-p/blog/insider-threat-detection-scenarios-real-world-cases-and-best-practices/Mon, 27 Apr 2026 11:12:23 -0000articleWhen you think about cybersecurity, your mind probably jumps to hackers, phishing scams, or malware from the outside. But sometimes, the most damaging threats are r…https://www.m365.fm/community/u/mirko-p/blog/risk-signals-explained-how-modern-fraud-detection-stays-ahead/https://www.m365.fm/community/u/mirko-p/blog/risk-signals-explained-how-modern-fraud-detection-stays-ahead/Mon, 27 Apr 2026 08:20:58 -0000articleDiscover how risk signals improve fraud detection by combining identity, behavior, device, and transaction context for faster, more accurate decisions.https://www.m365.fm/community/u/mirko-p/blog/consent-phishing-explained-how-attackers-bypass-mfa-and-compromise-microsoft-365/https://www.m365.fm/community/u/mirko-p/blog/consent-phishing-explained-how-attackers-bypass-mfa-and-compromise-microsoft-365/Sun, 26 Apr 2026 12:00:59 -0000articleLearn how Microsoft 365 consent phishing bypasses traditional MFA defenses, abuses OAuth permissions, and how to detect and prevent it.https://www.m365.fm/community/u/mirko-p/blog/investigating-compromised-accounts-a-complete-guide-for-microsoft-365-and-cloud-environments/https://www.m365.fm/community/u/mirko-p/blog/investigating-compromised-accounts-a-complete-guide-for-microsoft-365-and-cloud-environments/Sun, 26 Apr 2026 11:47:30 -0000articleInvestigating Compromised Accounts: A Complete Guide for Microsoft 365 and Cloud Environmentshttps://www.m365.fm/community/u/mirko-p/blog/insider-risk-scenarios-understanding-and-preventing-data-threats-in-microsoft-environments/https://www.m365.fm/community/u/mirko-p/blog/insider-risk-scenarios-understanding-and-preventing-data-threats-in-microsoft-environments/Sun, 26 Apr 2026 11:41:55 -0000articleInsider risks aren’t just a buzzword—they’re an everyday security reality, especially when you depend on Microsoft 365, Azure, or other cloud plat…https://www.m365.fm/community/u/mirko-p/blog/phishing-resistant-mfa-methods-protecting-identity-in-the-modern-threat-landscape/https://www.m365.fm/community/u/mirko-p/blog/phishing-resistant-mfa-methods-protecting-identity-in-the-modern-threat-landscape/Sun, 26 Apr 2026 11:26:48 -0000articlePhishing-resistant multi-factor authentication (MFA) is quickly becoming a must-have for every organization running their business in the cloud, especially those in…https://www.m365.fm/community/u/mirko-p/blog/enterprise-mfa-rollout-strategy-best-practices-for-success/https://www.m365.fm/community/u/mirko-p/blog/enterprise-mfa-rollout-strategy-best-practices-for-success/Sun, 26 Apr 2026 10:48:38 -0000articleThis guide lays out a clear, step-by-step approach for enterprises looking to roll out multi-factor authentication (MFA) across complex environments, especially wit…https://www.m365.fm/community/u/mirko-p/blog/conditional-access-bypass-scenarios-understanding-and-preventing-modern-identity-threats/https://www.m365.fm/community/u/mirko-p/blog/conditional-access-bypass-scenarios-understanding-and-preventing-modern-identity-threats/Sun, 26 Apr 2026 10:32:49 -0000articleConditional access is the front line of defense for managing who can get into your Microsoft 365 or Azure environment and under what circumstances. Whenever someone…https://www.m365.fm/community/u/mirko-p/blog/require-phishing-resistant-mfa-modern-identity-defense-essentials/https://www.m365.fm/community/u/mirko-p/blog/require-phishing-resistant-mfa-modern-identity-defense-essentials/Sun, 26 Apr 2026 10:11:33 -0000articleUnderstand phishing-resistant MFA, why it is stronger than legacy methods, and how to deploy it for Microsoft Entra ID and privileged access.https://www.m365.fm/show/episodes/microsoft-cloud-forensics-investigation/https://www.m365.fm/show/episodes/microsoft-cloud-forensics-investigation/Fri, 19 Dec 2025 00:00:00 -0000episodeThis episode plays out like a cybercrime thriller, exposing how today’s most dangerous breaches don’t smash doors—they’re invited inside. The investigation opens with a single click on January 12th. A polished phishing email doesn’t steal a password; it…https://www.m365.fm/show/episodes/why-m365-security-fails-social-engineering/https://www.m365.fm/show/episodes/why-m365-security-fails-social-engineering/Wed, 03 Dec 2025 00:00:00 -0000episodeYour Microsoft 365 tenant might already be compromised—and your MFA is effectively useless because of one misconfiguration you’ve probably left on. In this episode, the Office of Corrective Doctrine walks you through five brutal real-world attack paths inside…https://www.m365.fm/show/episodes/microsoft-365-attack-chain-explained/https://www.m365.fm/show/episodes/microsoft-365-attack-chain-explained/Tue, 02 Dec 2025 00:00:00 -0000episodeMFA is not your shield – it’s already broken. In this episode, we walk the bridge of a real M365 tenant breach, step-by-step, from the attacker’s cockpit to your shattered inbox. You’ll hear how one phishing click plus an AitM proxy and a “benign” OAuth app…https://www.m365.fm/show/episodes/security-copilot-synthetic-analysts-transforming-socs/https://www.m365.fm/show/episodes/security-copilot-synthetic-analysts-transforming-socs/Mon, 10 Nov 2025 00:00:00 -0000episodeYour “intern” just became your scariest, smartest coworker—and it’s made of code. In this episode, we unpack how Microsoft Security Copilot is quietly turning traditional Security Operations Centers into AI-driven defense factories. Forget drowning in alerts…https://www.m365.fm/show/episodes/the-castle-gate-is-open-is-your-entra-id-secured/https://www.m365.fm/show/episodes/the-castle-gate-is-open-is-your-entra-id-secured/Mon, 03 Nov 2025 00:00:00 -0000episodeIdentity is the real border now. In Microsoft cloud the firewall is no longer the decisive wall — Entra ID is. Modern attackers don’t smash doors; they log in using harvested, phished, or purchased credentials. That’s why a password-only world is effectively…https://www.m365.fm/show/episodes/your-phishing-reports-arent-showing-the-whole-story/https://www.m365.fm/show/episodes/your-phishing-reports-arent-showing-the-whole-story/Tue, 05 Aug 2025 00:00:00 -0000episodeYour phishing dashboard is lying to you. The “all good” charts hide near-miss clicks, silent investigations, and active campaigns threading your inboxes right now. We show how to tap Microsoft Defender’s buried signals and build living Power BI dashboards…https://www.m365.fm/show/episodes/navigating-the-modern-cybersecurity-landscape-insights-from-sc-900/https://www.m365.fm/show/episodes/navigating-the-modern-cybersecurity-landscape-insights-from-sc-900/Tue, 05 Aug 2025 00:00:00 -0000episodeLearn SC-900 cybersecurity fundamentals, including Zero Trust, identity, compliance, and Microsoft security concepts for protecting modern cloud environments.https://www.m365.fm/show/episodes/microsoft-defender-for-cloud/https://www.m365.fm/show/episodes/microsoft-defender-for-cloud/Tue, 05 Aug 2025 00:00:00 -0000episodeUse Defender for Cloud to improve multicloud security posture, protect workloads, map compliance, detect threats, recommendations, and remediate risks.https://www.m365.fm/show/episodes/defender-for-m365-isnt-what-you-think/https://www.m365.fm/show/episodes/defender-for-m365-isnt-what-you-think/Tue, 05 Aug 2025 00:00:00 -0000episodeYour users still click phish—even with Defender for M365 “fully enabled.” The culprit isn’t the attackers; it’s misaligned layers: Safe Links, Safe Attachments, anti-phishing ML, and mail flow rules that overlap, conflict, or leave gaps. This guide traces how…