Office 365 - Security

Practical Protection: Shall We Play a Game?

Paul Robichaux — Thu, 09 Nov 2023 15:14:31 +0000

This edition of Practical Protection is all about theory and playing games. In this blog, Paul Robichaux explains how to improve your security posture by setting up hypothetical scenarios in your environment.

The post Practical Protection: Shall We Play a Game? appeared first on Practical 365.

An Insider’s Look into Storm-0558

Richard Dean — Mon, 06 Nov 2023 11:00:00 +0000

The Storm-0558 incident serves as a stark reminder of the potential threats that organizations face in today's digital landscape. In this blog, Rich Dean recaps the insider conversation around Storm-0558 that the Practical 365 Podcast team had with Alex Weinert, Microsoft's VP for Identity Security.

The post An Insider’s Look into Storm-0558 appeared first on Practical 365.

Requiring MFA for the Microsoft Admin Portal Apps

Paul Robichaux — Thu, 02 Nov 2023 10:00:00 +0000

In this blog, Paul Robichaux reviews how to add additional protection to Microsoft Admin Portal Apps through MFA.

The post Requiring MFA for the Microsoft Admin Portal Apps appeared first on Practical 365.

Practical Protection: Banning Bad Passwords

Paul Robichaux — Thu, 26 Oct 2023 19:55:53 +0000

In this installment of Practical Protection, Paul Robichaux Talks about Password Banning in your Entra ID Tenant and why everyone should implement this extra layer of protection.

The post Practical Protection: Banning Bad Passwords appeared first on Practical 365.

Practical Protection: Practical Guidance from the Microsoft Digital Defense Report

Paul Robichaux — Thu, 12 Oct 2023 14:27:32 +0000

It's that time of the year again! Microsoft is releasing their annual Microsoft Digital Defense Report (MDDR), and you may want to give it a read. In this blog, we talk about the highlights from the MDDR and offer some advice to better protect your organization.

The post Practical Protection: Practical Guidance from the Microsoft Digital Defense Report appeared first on Practical 365.

Not Today, Satan: Securing Your Network by Blocking Ad-Borne Malware

Paul Robichaux — Fri, 06 Oct 2023 10:00:00 +0000

Apart from being annoying, advertisements can actually be used to deliver malware. This blog explains what "Malvertising" is and how to secure your network from these attacks.

The post Not Today, Satan: Securing Your Network by Blocking Ad-Borne Malware appeared first on Practical 365.

Storm-0558: Understanding How Microsoft Failed to Protect Itself

Paul Robichaux — Thu, 07 Sep 2023 16:11:55 +0000

Storm-0558 is a China-originated attack against sensitive Exchange Online mailboxes. The attack exposed several flaws in Microsoft's processing of data. Microsoft says that the holes are now closed, but it's still a good idea to check that your tenant is not being attacked in the same way.

The post Storm-0558: Understanding How Microsoft Failed to Protect Itself appeared first on Practical 365.