#MITRE ATT&CK

2 posts

July 16, 2026

What Attackers Do After They Get Past Your MFA

Most AiTM phishing narratives end at the credential capture. What happens in the hours and days that follow rarely gets documented. This field note does.

Cybersecurity Cyber Resilience Microsoft 365 Incident Response Phishing Microsoft Entra ID Business Continuity MITRE ATT&CK Field Notes

May 22, 2026

When Microsoft's Own Email Becomes the Weapon

A Microsoft CSP's analysis of notification abuse through CISA SCuBA, MITRE ATT&CK, NIST SP 800-53, and CIS Benchmarks — and what organizations must do now.

FeaturedCybersecurity MITRE ATT&CK NIST SP 800-53 CISA SCuBA Microsoft 365