Forbes contributors publish independent expert analyses and insights. Davey Winder is a veteran cybersecurity writer, hacker and analyst. Update, Feb. 27, 2025: This story, originally published Feb.

Just in case the drumbeat to adopt Multi-Factor Authentication (MFA) hasn't yet sunk in, a new report from Okta reveals that organizations using Microsoft 365 "Legacy Authentication" (like passwords) ...

What if the very tools you rely on to secure your organization’s data are quietly becoming obsolete? That’s the reality facing businesses as Microsoft prepares to retire its legacy Multi-Factor ...

Organizations using the Exchange Online e-mail messaging service now are getting the ability to use session ID information in Exchange Online audit logs to better detect attacks. The ability to use ...

If you've implemented multi-factor authentication, you should disable the default basic authentication to make sure attackers can't exploit it. Attackers will go after weaker credentials and passwords ...

The Guardz Research Unit uncovered a coordinated cyber campaign using outdated login methods to bypass MFA and infiltrate cloud environments by attempting to exploit basic authentication protocols The ...

Tips to protect against "password spray attacks" were expounded by Microsoft's Detection and Response Team (DART) in a Tuesday announcement. In a nutshell, organizations can best protect against such ...