Book a Security Consultation
Subtitle Icon
Blog Tag

Identity Security

Blog Thumbnail
Blog Meta Icon
May 5, 2026
Blog Meta Icon
11 minute read

Russia Harvested 18,000+ M365 Tokens Without Malware

Russia harvested 18,000+ Microsoft 365 OAuth tokens through compromised home routers — no malware, no detectable footprint. Inside the campaign.

Threat Intelligence
Blog Thumbnail
Blog Meta Icon
May 5, 2026
Blog Meta Icon
10 minute read

Every MFA Tool Is Being Bypassed. Here's How.

Every MFA tool in your stack is being bypassed right now. Adversary-in-the-middle phishing, SIM swap, MFA fatigue, push bombing — and what actually stops them.

Identity & Access
Blog Thumbnail
Blog Meta Icon
May 1, 2026
Blog Meta Icon
6 minute read

ADT 2026 Breach: Customer Trust Was the Breach

The ADT 2026 breach didn't compromise the alarm systems. It compromised the customer data underneath — and the vishing campaign that followed showed the real risk.

Threat Intelligence
Blog Thumbnail
Blog Meta Icon
April 27, 2026
Blog Meta Icon
9 minute read

Copilot Doesn't Create the Data Problem. It Reveals It.

Microsoft 365 Copilot does not create a permission problem. It reveals the one you already had. Inside the SharePoint sprawl Copilot exposes.

Executive Risk & Board Advisory