For years, a lot of phishing advice has boiled down to “Don’t click the link.” But attackers are getting better at reducing the amount of work they
There is a dangerous assumption I still hear from businesses – it’s in Microsoft 365, so Microsoft has it backed up. Microsoft certainly builds a
A convincing email lands in accounts. It appears to come from a supplier you know. The invoice looks right. The language is good. The person named in the email
There is a line in Huntress’s latest research that should make anyone responsible for Microsoft 365 security pay attention: MFA = PASS. Token = ISSUED. That is
A contact recently recommended Greg van der Gaast’s book I Call Bullshit. It challenges quite a few accepted ideas within cyber security and one of
Most people have completed hundreds of CAPTCHAs. Click the traffic lights. Find the bicycles. Tick “I’m not a robot”. We have become so accustomed to
Cyber criminals don’t work school hours. Your IT team shouldn’t have to work their hours either. Schools have spent a lot of time talking about
What to do in the first hour of a cyber attack If your business is hit by a cyber attack, the first hour matters. It
Multi-Academy Trusts are already familiar with cyber security guidance. There are DfE standards, safeguarding duties, data protection requirements, insurance questions, audit recommendations and, in some
Schools have always had to deal with cyber risk, but what is changing is how the attacks happen. For years, many people thought of school