A tutorial on analysing Azure sign-in logs

A look at ClickFix and ConsentFix, two social engineering attacks targetting users, and ways of protecting against them.

A tutorial explaining how to whitelist extensions in Microsoft Endpoint Manager, in the wake of the recent Google Chrome vulnerability.

Weekly update blog post about MFA, site design in Publii and social media

A brief look at creating rotating packet captures with tcpdump on Linux.

In the last post I looked at all the different methods of multi factor authentication, and evaluated the strength of each type. Passkeys came out as a clear winner, as they mitigate both fake domains ...

It's 2026, and identity is the new perimeter. The Crowdstrike Global Threat Report 2025 focuses heavily on the identity and key methods used to compromise accounts. Sure, attackers and bots are still ...

I'm currently locked in a battle with a senior member of our organisation who is annoyed that someone they contact regularly at another organisation gets quarantined by our email security. Do you want...