INSIGHTS & ADVISORIES
Security Advisories
AADSTS5000224: Microsoft deauthenticated the whole tenant. The DR list is not a portal ticket.
AADSTS5000224 means authentication is blocked at STS for the whole tenant. Portal, Entra admin, and the in-tenant support ticket are gone. The list that still works is tenant ID, billing proof, accepted GDAP, and backup that does not live only in the tenant.
Read the article →
Microsoft’s Sept 1 passkey email omitted the Graph opt-out. It is only in the FAQ. Decide before Tuesday.
The Microsoft-managed passkey campaign for SMS and voice users starts September 1. The tenant email skipped the temporary Graph opt-out — optOutSettings.passkeyDynamicMigration — which lives in the Learn FAQ and does not move the February 2027 retirement.
Read the article →
How Microsoft 365 Tenants Actually Get Breached in 2026 — and the Five Controls That Stop It
AiTM token theft, password spray against forgotten accounts, and legacy auth are behind most M365 compromises we see. Here's the attack chain and the exact controls that break it.
Read the article →