cat articles/

Blog

Technical articles on cybersecurity, privacy and digital governance. Straightforward, without unnecessary jargon.

M365: How They Steal Credentials (and How to Respond)M365 Security
Oct 1, 2026

M365: How They Steal Credentials (and How to Respond)

AiTM phishing, MFA fatigue, token theft — the real attack vectors against Microsoft 365 accounts and the exact response sequence for users and admins.

read more →
Microsoft Defender MITRE ATT&CK on Microsoft 365MITRE ATT&CK
Mar 12, 2026

Microsoft Defender MITRE ATT&CK on Microsoft 365

I explored the Microsoft 365 Defender portal and its cloud-native MITRE ATT&CK coverage: unified XDR, Defender for Office 365, MDE, and Cloud Apps in a single pane of glass.

read more →
How Microsoft Defender Detects MITRE ATT&CK TechniquesMITRE ATT&CK
Mar 9, 2026

How Microsoft Defender Detects MITRE ATT&CK Techniques

Microsoft Defender XDR, Defender for Identity, and Defender for Endpoint each map to specific MITRE ATT&CK tactics. This article breaks down the coverage per product — from lateral movement detection in Active Directory to process injection alerts on endpoints — with actionable recommendations for security teams.

read more →
Introduction to MITRE ATT&CK: the map of cyber attacksMITRE ATT&CK
Mar 6, 2026

Introduction to MITRE ATT&CK: the map of cyber attacks

MITRE ATT&CK is the reference framework for understanding how attackers operate. Discover the 14 Enterprise tactics and how to use them for defense.

read more →