July 16, 2026July 16, 2026What Attackers Do After They Get Past Your MFAMost AiTM phishing narratives end at the credential capture. What happens in the hours and days that follow rarely gets documented. This field note does.CybersecurityCyber ResilienceMicrosoft 365Incident ResponsePhishingMicrosoft Entra IDBusiness ContinuityMITRE ATT&CKField Notes
May 22, 2026May 22, 2026When Microsoft's Own Email Becomes the WeaponA Microsoft CSP's analysis of notification abuse through CISA SCuBA, MITRE ATT&CK, NIST SP 800-53, and CIS Benchmarks — and what organizations must do now.FeaturedCybersecurityMITRE ATT&CKNIST SP 800-53CISA SCuBAMicrosoft 365
