[av_textblock fold_type=” fold_height=” fold_more=’Read more’ fold_less=’Read less’ fold_text_style=” fold_btn_align=” textblock_styling_align=” textblock_styling=” textblock_styling_gap=” textblock_styling_mobile=” size=” av-desktop-font-size=” av-medium-font-size=” av-small-font-size=” av-mini-font-size=” font_color=” color=” fold_overlay_color=” fold_text_color=” fold_btn_color=’theme-color’ fold_btn_bg_color=” fold_btn_font_color=” size-btn-text=” av-desktop-font-size-btn-text=” av-medium-font-size-btn-text=” av-small-font-size-btn-text=” av-mini-font-size-btn-text=” fold_timer=” z_index_fold=” id=” custom_class=” template_class=” av_uid=’av-m7xfm0ra’ sc_version=’1.0′ admin_preview_bg=”]<\/p>\n
As we all know, Office 365, or M365 as it\u2019s now called, is probably the leading productivity suite used by organisations of all shapes and sizes. Because of its popularity, it\u2019s a frequent target for cyberattacks and, although thankfully rare, operational incidents.<\/p>\n
From our research of recent high profile breaches and incidents, we\u2019ve identified the following themes that you need to be aware of:<\/p>\n
Phishing remains the most common attack vector against M365. Criminals continue to improve the quality of their malicious campaigns to create\u00a0 convincing emails which are designed to trick users into revealing credentials, approving fraudulent actions or clicking on compromised or malicious websites. Business Email Compromise, is considered a subset of phishing and involves attackers trying to gain access to business email accounts in order to intercept communications, redirect payments, or exfiltrate sensitive data. Whilst Microsoft doesn\u2019t publish these statistics, it\u2019s been reported by industry experts that they detect over 150,000 BEC attempts every day, with, phishing regularly cited as the initial access method in many breaches.<\/p>\n
M365 accounts are constantly being attacked through the form of credential stuffing (where an attacker uses leaked email addresses and passwords from other breaches), brute force, or exploiting weak authentication. Once they\u2019ve successfully logged in, they can access emails, files, and sensitive business information. The lack of enforced multi-factor authentication (MFA) makes it easier should they obtain the password. Microsoft observes thousands of password-based attacks per second on cloud identities.<\/p>\n
Misconfigured M365 environments, including things as simple as excessive admin privileges, unintended or unauthorised external sharing, and enabled legacy authentication are the primary cause of breaches. Legacy authentication, which does not support MFA, is too often exploited as it enables attackers to bypass security controls. Misconfigurations can also lead to data leaks as it facilitates unauthorised access to sensitive information and resources.<\/p>\n
Many third party applications require a user with privilege to consent which enables the application to interact with your M365 service. Without appropriate due diligence and approvals taking place, an attacker could trick them into authorising a malicious application. These apps can then access mailboxes, files, and other resources, often without triggering traditional security alerts. Unrestricted or over privileged third-party app access is a significant risk, as it can lead to large-scale account compromise or data exfiltration.<\/p>\n
These themes all highlight the importance of robust security practices, including enforcing MFA wherever possible, minimising elevated or admin privileges, disabling legacy authentication when it’s not required (and if it is, manage and review who has access on a frequent basis), and monitoring third-party app access.<\/p>\n
By taking some basic steps, you can make it a lot harder for a simple attack to be successful and still have time to focus on your primary job of supporting your customers and growing your business.<\/p>\n
Engaging with Somniac Security, can help secure your services leaving you safe in the knowledge that you won\u2019t suffer from these common attacks.\u00a0 Contact us at info@somniacsecurity.com today to help safeguard your business against tomorrow\u2019s challenges!
\n[\/av_textblock]<\/p>\n","protected":false},"excerpt":{"rendered":"
Hackers love Microsoft 365 and they know exactly how to strike. From phishing scams to weak configurations and risky third-party apps, attackers are constantly probing for gaps. Learn the top four tactics that they use and how you can stop them before they stop you.<\/p>\n","protected":false},"author":3,"featured_media":730,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[9],"tags":[16,17],"class_list":["post-1496","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-m365","tag-cyber-security-risks","tag-cybersecurity-attacks"],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"https:\/\/test.somniacsecurity.com\/wp-content\/uploads\/2025\/03\/Somniac-Image.png","_links":{"self":[{"href":"https:\/\/test.somniacsecurity.com\/index.php?rest_route=\/wp\/v2\/posts\/1496","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/test.somniacsecurity.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/test.somniacsecurity.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/test.somniacsecurity.com\/index.php?rest_route=\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/test.somniacsecurity.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1496"}],"version-history":[{"count":0,"href":"https:\/\/test.somniacsecurity.com\/index.php?rest_route=\/wp\/v2\/posts\/1496\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/test.somniacsecurity.com\/index.php?rest_route=\/wp\/v2\/media\/730"}],"wp:attachment":[{"href":"https:\/\/test.somniacsecurity.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1496"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/test.somniacsecurity.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1496"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/test.somniacsecurity.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1496"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}