https://lwst.io/en/tags/exchange-online/ Recent content in Exchange-Online on lwst.io https://lwst.io/images/profile-crop.jpg https://lwst.io/images/profile-crop.jpg Hugo en Sun, 18 Oct 2026 00:00:00 +0000 https://lwst.io/en/posts/least-privilege-apps/ Sun, 18 Oct 2026 00:00:00 +0000 https://lwst.io/en/posts/least-privilege-apps/ Attackers used the credential of the ConnectWise Cloud Backup app to sign in to more than 300 Microsoft 365 tenants, with no user and no MFA. Why our diligence with users stops at enterprise apps, and what actually helps.