Microsoft product
Two accounts, a 32-character split password, FIDO2 keys, one Conditional Access exclusion, and an alert on every sign-in. The full checklist for Microsoft 365 emergency access accounts.
Three overlapping enforcement systems and no central report make MFA coverage in Microsoft 365 genuinely hard to prove. Here is what insurers will eventually demand and how to produce it.
June 2024 brings token protection and the Entra PowerShell module to preview, hardware-backed device attestation and Config Refresh in Intune, expanded Copilot prerequisites, and a batch of Teams and Outlook updates.
Compromise is the opening move; persistence is the game. The MFA methods, device joins, app consents, and inbox rules attackers plant in Microsoft 365, with the CIS-mapped settings that block each.
Passkeys stop phishing, not stolen sessions. A real $530K wire fraud shows how pass-the-cookie walks past FIDO2, and the layered Microsoft 365 controls that actually close the gap.
App secrets and refresh tokens hardcoded in scripts are a breach waiting to happen. Two scripts to load Secure Application Model secrets into Azure Key Vault and pull them at runtime for headless automation.
Copilot Studio agents and Team Copilot headline May 2024, alongside mandatory MFA for Azure, external authentication methods in Entra, macOS Platform SSO, and a twelve-feature Teams batch.
SMS codes, push notifications, and passkeys all count as MFA, but they do not stop the same attacks. Here is the strength hierarchy, what defeats each tier, and the upgrade path to phishing-resistant.
Personal-device access does not have to be negotiated client by client. Define three BYOD support tiers once, then deploy the matching Conditional Access, MAM, and DLP stack everywhere.
The exclusion added during a migration, the policy stuck in report-only, the tenant that never got the baseline. Here are the gaps attackers find first, and the 16-policy baseline that closes them.
Copilot for Security goes GA April 1 with pay-as-you-go pricing, NCE subscriptions become transferable mid-term, Restricted SharePoint Search arrives, and Teams ships voice isolation.
The unified Planner app replaces Tasks in Teams, Azure Information Protection Plan 1 ends sale, Intune adds macOS setup and Autopilot controls, and Copilot reaches SharePoint, OneDrive, and mobile.
