https://www.m365.fm/entity/token-theft/Token theft is an attack in which an adversary steals and replays a user's session or access token, for example after adversary-in-the-middle phishing, to act as the user without needing the password or passing MFA again.enhttps://www.m365.fm/community/u/mirko-p/blog/saml-vs-openid-connect-microsoft-entra-id/https://www.m365.fm/community/u/mirko-p/blog/saml-vs-openid-connect-microsoft-entra-id/Fri, 30 Oct 2026 06:02:07 -0000articleCompare SAML and OpenID Connect (OIDC) protocols in Microsoft Entra ID. Learn the key technical differences, use cases, and when to choose each standard.https://www.m365.fm/community/u/mirko-p/blog/uncovering-hidden-microsoft-365-and-azure-cloud-security-risks/https://www.m365.fm/community/u/mirko-p/blog/uncovering-hidden-microsoft-365-and-azure-cloud-security-risks/Fri, 28 Aug 2026 17:56:01 -0000articleManaging a cloud environment can often feel like a juggling act. While your day-to-day operations demand your full attention—handling support tickets, deployi…https://www.m365.fm/community/u/mirko-p/blog/striving-for-balance-security-vs-usability-in-microsoft-365/https://www.m365.fm/community/u/mirko-p/blog/striving-for-balance-security-vs-usability-in-microsoft-365/Fri, 28 Aug 2026 13:49:06 -0000articleWelcome back to the podcast companion blog! In this post, we are diving deep into the intricate dynamics of Microsoft 365 security, specifically focusing on the ong…https://www.m365.fm/community/u/mirko-p/blog/beyond-the-prompt-why-mfa-isnt-enough-to-protect-your-data/https://www.m365.fm/community/u/mirko-p/blog/beyond-the-prompt-why-mfa-isnt-enough-to-protect-your-data/Fri, 28 Aug 2026 13:40:04 -0000articleWelcome back, security enthusiasts! If you are anything like me, you probably remember the collective sigh of relief the tech community breathed when multi-factor a…https://www.m365.fm/community/u/mirko-p/blog/breaking-down-the-m365-attack-chain-what-you-need-to-know/https://www.m365.fm/community/u/mirko-p/blog/breaking-down-the-m365-attack-chain-what-you-need-to-know/Fri, 28 Aug 2026 13:37:24 -0000articleWelcome back to the podcast blog! If you have been following our recent audio episodes, you know we have been diving deep into cloud security, threat landscapes, an…https://www.m365.fm/show/episodes/building-a-secure-microsoft-first-msp-intune-defender-entra-id-at-scale-with-albin-klinaku-mvp/https://www.m365.fm/show/episodes/building-a-secure-microsoft-first-msp-intune-defender-entra-id-at-scale-with-albin-klinaku-mvp/Thu, 16 Jul 2026 00:00:00 -0000episodeBuilding a successful Managed Service Provider today requires far more than device management and helpdesk support. Customers expect proactive security, cloud expertise, and modern identity protection from day one. In this episode of the M365 Show, Mirko…https://www.m365.fm/community/u/mirko-p/blog/federation-with-adfs-explained-modern-identity-sso-and-migration-to-entra-id/https://www.m365.fm/community/u/mirko-p/blog/federation-with-adfs-explained-modern-identity-sso-and-migration-to-entra-id/Thu, 30 Apr 2026 04:55:23 -0000articleUnderstand AD FS federation, SSO, trust relationships, and security, then explore migration from AD FS to Microsoft Entra ID and common troubleshooting issues.https://www.m365.fm/community/u/mirko-p/blog/phishing-resistant-mfa-methods-protecting-identity-in-the-modern-threat-landscape/https://www.m365.fm/community/u/mirko-p/blog/phishing-resistant-mfa-methods-protecting-identity-in-the-modern-threat-landscape/Sun, 26 Apr 2026 11:26:48 -0000articlePhishing-resistant multi-factor authentication (MFA) is quickly becoming a must-have for every organization running their business in the cloud, especially those in…https://www.m365.fm/community/u/mirko-p/blog/mfa-fatigue-attack-explained-how-repeated-prompts-put-microsoft-365-and-azure-security-at-risk/https://www.m365.fm/community/u/mirko-p/blog/mfa-fatigue-attack-explained-how-repeated-prompts-put-microsoft-365-and-azure-security-at-risk/Sun, 26 Apr 2026 11:08:06 -0000articleIn today’s Microsoft-centric workplaces, multi-factor authentication (MFA) is supposed to be your front door lock—making sure cybercriminals can’t…https://www.m365.fm/show/episodes/microsoft-cloud-forensics-investigation/https://www.m365.fm/show/episodes/microsoft-cloud-forensics-investigation/Fri, 19 Dec 2025 00:00:00 -0000episodeThis episode plays out like a cybercrime thriller, exposing how today’s most dangerous breaches don’t smash doors—they’re invited inside. The investigation opens with a single click on January 12th. A polished phishing email doesn’t steal a password; it…https://www.m365.fm/show/episodes/why-m365-security-fails-social-engineering/https://www.m365.fm/show/episodes/why-m365-security-fails-social-engineering/Wed, 03 Dec 2025 00:00:00 -0000episodeYour Microsoft 365 tenant might already be compromised—and your MFA is effectively useless because of one misconfiguration you’ve probably left on. In this episode, the Office of Corrective Doctrine walks you through five brutal real-world attack paths inside…https://www.m365.fm/show/episodes/microsoft-365-attack-chain-explained/https://www.m365.fm/show/episodes/microsoft-365-attack-chain-explained/Tue, 02 Dec 2025 00:00:00 -0000episodeMFA is not your shield – it’s already broken. In this episode, we walk the bridge of a real M365 tenant breach, step-by-step, from the attacker’s cockpit to your shattered inbox. You’ll hear how one phishing click plus an AitM proxy and a “benign” OAuth app…https://www.m365.fm/show/episodes/conditional-access-policy-trust-issues/https://www.m365.fm/show/episodes/conditional-access-policy-trust-issues/Sun, 30 Nov 2025 00:00:00 -0000episodeThis episode explains how to “calm down” a messy Conditional Access setup by removing blind spots and setting clear boundaries. It walks through three main trust problems—overbroad exclusions, unclear device compliance, and token theft—and shows how to…https://www.m365.fm/show/episodes/the-hidden-risks-lurking-in-your-cloud/https://www.m365.fm/show/episodes/the-hidden-risks-lurking-in-your-cloud/Mon, 03 Nov 2025 00:00:00 -0000episodeThis episode exposes the most significant — and often hidden — cloud security risks in Microsoft 365 and Azure. It cuts through marketing claims with real attack examples, misconfiguration failures, and lessons learned from actual incident response timelines.…