Security blog
Explore insights, industry trends, and practical tips that have the cybersecurity industry buzzing.
MFA Isn’t Enough Anymore: How New Phishing Kits Are Getting Past Multi-Factor Authentication in Education and Government
If your organization has multi-factor authentication (MFA) turned on for Microsoft 365, you have already done more than most. But…
Read more
64 Schools, One Cyberattack: What Springfield Public Schools Teaches K-12 IT Leaders About Operational Resilience
In September 2026, a cyberattack didn’t steal a single dollar from Springfield Public Schools — and it still shut down…
Read more
When a Phone Call Becomes a Data Breach: The Technical Anatomy of the McKesson Vishing Attack
No exploit. No malware. No unpatched server. Somewhere inside McKesson Corporation this past August, an employee picked up the phone,…
Read more
Microsoft 365 Updates and Retirements: What EDU & SLED IT Teams Need to Know This September
Microsoft 365 continues to evolve — and for education and state and local government (SLED) IT teams, this month’s changes…
Read more
Microsoft 365 Updates and Retirements: What EDU & SLED IT Teams Need to Know
Microsoft 365 continues to evolve—and for education and state and local government IT teams, those changes can have real operational…
Read more
Practical AI Governance in Microsoft 365: How Education and Public Sector Teams Can Secure AI
AI is already part of the workplace. For K-12 school districts, higher education institutions, and government organizations, employees are using…
Read more
Back-to-School Cybersecurity Threats: What Education IT Teams Should Watch This Fall
The start of a new school year brings more than new students, new schedules, and a flood of help desk…
Read more
Microsoft Is Retiring SMS and Voice MFA: What Education & SLED IT Teams Need to Know
Microsoft is making a major change to authentication in Microsoft Entra ID: SMS and voice will no longer be the…
Read more
Iranian Cyber Threats Continue to Target Government and Higher Education in 2026
Iranian state-sponsored cyber activity is evolving — and government agencies, colleges, universities, and K-12 districts remain among its highest-value targets.…
Read more
Defender XDR Alert: Suspicious Exchange Online Graph Reconnaissance Activity
How Microsoft Defender XDR Detects Directory Enumeration — and What Your Team Should Do Next The most dangerous phase of…
Read more