A writeup about the MERCURY attack by the Microsoft Threat Intelligence team reveals how a nation state actor linked to the Iranian government compromised an Azure AD tenant by using the AADConnect tool. In this article, we discuss how the attack developed and what you can do to prevent the same attack techniques being used against your tenant.
In this edition of Practical Protection with Paul Robichaux, we dive into understanding what multi-tenant applications are, what they can do, and how to manage them in order to keep your tenant and users safe.
Conditional Access policies are one of Microsoft's most versatile and flexible security features ever built. However, there’s one area that Conditional Access can help you protect that isn’t as well known—using IP restrictions to control where a specific app can be used.
Managing Office updates is one of those thankless tasks, like taking out the recycling, that is sometimes wearisome but contributes to making the world a better place. This article covers how you can keep track of these updates, and what can go wrong if you don't.
Hybrid work is really a mixed blessing—while it offers a lot of fantastic benefits for people who are able to take advantage of it, it can introduce some new and unpleasant security issues that you need to be prepared to deal with. This article dives into these new risks and how you can avoid them.
Practical 365 is very focused on discussing management and administration of Microsoft 365 environments. In this edition of Practical Protection, Paul Robichaux pivots away from Microsoft and looks at another ecosystem that you might have in your network: VMware’s ESXi.
With an increase in ads being used to deliver malware, there is now a practical reason to consider blocking ads on your corporate network. Paul Robichaux offers 4 solutions to protecting your org from these pesty attacks.
In early December 2022, Rackspace had a major breach in their exchange environment that led to customers' mail data being stolen. This article explains what happened and what can be learned from this incident.
In this week's episode of Practical Protection, Paul Robichaux discusses two lesser-known Microsoft Defender for Cloud Apps (MDCA) features: cloud discovery and the cloud app catalog. Both of which are very useful when evaluating cloud apps for use in your environment.
It Is known that Microsoft encrypts data both at rest and in transit, but is this enough protection for your documents? In this article, Paul Robichaux goes over adding an extra layer of protection through Double-Key and Customer Key Encryption.
A thorough understanding of what Defender for Office 365 can do is important as you consider how best to protect your tenant. In this edition of Practical Protection, Paul deep dives into the umbrella brand of Microsoft Defender and its individual products.
This week on Practical Protection, Paul discusses the history of passwords and the many problems they pose in the modern cloud-based world.
