
The Backdoor That Survives a Password Reset: OAuth App Abuse in Microsoft 365
A malicious OAuth app keeps mailbox access after every password reset. How attackers plant them in Microsoft 365, plus the consent lockdown and hunting runbook.
Microsoft product

A malicious OAuth app keeps mailbox access after every password reset. How attackers plant them in Microsoft 365, plus the consent lockdown and hunting runbook.

Exchange Online enforces tenant-wide outbound email limits, E5 Security arrives as a Business Premium add-on, and the Report Message add-in enters maintenance mode.

A 5% increase on annual NCE plans paid monthly, Teams Phone going up, Copilot gaining monthly billing and a free chat tier, plus stackable promos. What to lock in before April 1, 2025.

Users refuse enrollment, admins refuse open access. Intune app protection policies plus one Conditional Access rule protect Microsoft 365 data on personal phones without managing the device.

New Outlook migration turns opt-out for SMBs in January 2025, monthly billing on annual terms gets a 5% markup, Viva Goals gets a retirement date, and Teams ships ten quality-of-life features.

CloudCapsule connects to a Microsoft 365 tenant and returns a CIS-mapped security assessment with evidence, remediation steps, and a branded executive summary in minutes, not man-hours.

Starting January 27, 2025, unlicensed OneDrive accounts get archived behind reactivation and storage fees, or deleted outright. Here is the math and the four ways to respond.

Ignite 2024 set the Teams roadmap for 2025: speech-to-speech interpretation in nine languages, email-verified external attendees, bot-blocking CAPTCHA, and a merged chat and channels experience.

Ignite 2024 buried real news under Copilot branding. The 20 announcements that matter, grouped: agents, Copilot+ PCs, Windows 365, Windows resiliency and security, Edge, and Lighthouse.

External collaborators do not need download rights to do their job. Two settings force guests into authenticated, browser-only access and block local downloads in SharePoint and OneDrive.

Copilot agents reach general availability, Teams adds impersonation warnings for external chat, a new calendar lands in January, and Office 2016/2019 get one year of support left.

A HaloPSA self-service form, one webhook, and a Power Automate flow per tenant turn user onboarding into a hands-off process. Here is the full build, including the ROI math.