Safe Remediation: evidence to collect before a security change
An attributed summary of Observe, Prove, Act and Confirm, with an illustrative checklist for testing, approving and checking a security change.
incidentresponse
2 stories
Microsoft 365 Token Replay Attack Compromises 79 Organizations
An attacker replayed stolen Microsoft 365 tokens to breach 79 organizations between July 14 and September 22, 2026, without using passwords.