01
Storm-2949-style account takeover
How attackers can abuse self-service password reset and human trust to gain access without relying on traditional password cracking.
On-Demand Webinar
Identity Under Attack Protect Microsoft 365 before the gaps become incidents.
Attackers no longer need to crack a password to take over an account. Session-token theft, password-reset abuse and trusted collaboration channels are changing the identity threat landscape inside Microsoft 365.
Originally aired
24 June 2026
Time
10:00–11:00 SAST
Format
On-demand webinar
On-demand webinar
Watch Identity Under Attack
Catch up on the full Microsoft 365 identity security session with Aldo van Tonder and Henk Steyn.
Watch on YouTube →What the webinar covered
Three active attack patterns — and the controls that help close the gaps
4Sight’s Chief Digital Officer and Modern Workplace Lead unpacked what is happening, what it means for organisations using Microsoft 365, and the practical steps that can strengthen identity protection.
02
Kali365 token-theft phishing kits
Why an MFA approval does not automatically make the session that follows immune to theft, replay or abuse.
03
Microsoft Teams external chat exposure
How external messaging can become an impersonation and phishing route when tenant settings and trusted domains are not deliberately reviewed.
04
4security Identity Protect
A structured approach to assessment, hardening, Conditional Access, MFA strategy, external access and ongoing security monitoring.
Your identity is your perimeter
MFA is important. Identity protection now has to go further.
Modern attacks increasingly target what happens around and after authentication. The practical response is not to replace Microsoft 365, but to deliberately review identity posture, remove unnecessary privilege, harden authentication flows and govern external access.
Phishing-resistant MFA for privileged accounts
Conditional Access and session controls
Reduced and separated administrative access
Blocked legacy authentication and device-code risks
Governed Teams and external collaboration
Strengthen your Microsoft 365 identity posture
Know where the gaps are before an attacker finds them.
4security Identity Protect helps organisations assess and harden Microsoft 365 identity and access controls, with protection options aligned to different levels of risk and maturity.