Insights

Thought leadership themes anchored in executive cybersecurity leadership, resilience, and real incident response experience.

Articles

Filtered byMicrosoft 365

The FBI Just Told You Your Password Doesn't Matter

identityphishingMicrosoft 365OAuththreat brief· 6 min read· Sep 1, 2026

OAuth consent phishing steals nothing — the victim hands over a real, platform-issued grant. Password resets and MFA re-enrolment don't kick the attacker out. A tenant setting does.

Your Session Will Get Stolen. Here's How to Make It Worthless.

identity securityMicrosoft 365conditional accessMFAincident response· 7 min read· Jul 29, 2026

A practical Monday-morning checklist for making stolen session tokens useless and catching the after-party fast. Follow-up to the Kali365 piece.

Kali365 Isn't Your Problem. Your Session Cookie Is.

identity securityphishingMFAMicrosoft 365MSP· 6 min read· Jul 28, 2026

A new phishing kit got a name this year and the whole industry lost the plot. Kali365 doesn't want your password — it wants what comes after the login.

Core Themes

  • The Cyber Resilience Leadership Framework
  • What 600+ incident response engagements teach leaders
  • The executive role in cybersecurity
  • Incident preparedness as a leadership discipline
  • Security leadership in the AI era

Featured Concept

The Cyber Resilience Leadership Playbook is a signature thought leadership platform built around lessons from 600+ incident response engagements.