Tag: Cybersecurity

Microsoft Entra PIM is one of those controls most admins know they should use, but many tenants still leave too much privilege permanently assigned. That is the bit that causes the damage. A user does not need to be a Global Administrator all day because they occasionally reset Conditional Access, approve an enterprise app, update […]

What are insider threats? Insider threats are risks caused by people who already have legitimate access to your systems and data, employees, contractors, partners, volunteers, or students. They also include compromised insiders, where an attacker abuses a real user’s account. Motives range from mistakes and convenience through to financial gain, coercion, grievance, or curiosity. Never […]

Break glass accounts exist for moments like this “My entire Microsoft 365 organisation is down. I can’t even log in as the admin.” This was the cry for help from a sysadmin whose tenant became completely inaccessible due to a misconfigured MFA policy. Microsoft Teams? Down. SharePoint? Inaccessible. Admin centre? Locked out. Even the global […]