Microsoft is retiring SharePoint one-time passcodes through November 2026. Older links to clients and vendors will start failing. Here is the 30-minute fix.
Microsoft dismantled EvilTokens, a $500/month phishing service whose AI read 12,000 stolen M365 inboxes to plan invoice fraud. What it did and what to check now.
Copilot creates no new access. It just makes everything a user can already reach instantly searchable. The oversharing was there for years — Copilot is the flashlight.
A phishing attack making the rounds this summer never asks for your password. It asks you to approve a real Microsoft login, and small businesses keep saying yes.
Most small businesses already pay for Microsoft 365 security features. The problem is that nobody configured the tenant to actually use them.
A 100-user MA company's Entra sync silently failed for six months. Disabled AD users kept their M365 licenses. Here's the hidden default that caused it.