M365 TENANT SECURITY RESEARCH

CoreView Intelligence Labs Deep M365 Research. Written by Practitioners.

Structured research for practitioners who need to understand what's actually happening inside their tenant, written by engineers, backed by real-world data.

Read the Articles

Featured Article

Blueprint of a house with the front door locked and disabled, while the back door is still wide open

What the ConnectWise Cloud Backup Incident Means for Microsoft 365 Admins

Sometime between October 13th and October 17th this year (2026), a malicious threat actor used stolen application credentials for ConnectWise Cloud Backup – a Microsoft 365 backup service, formerly known as SkyKick – to sign in to customers’ tenants. ConnectWise has now disabled...

READ NOW
Blueprint of a house with the front door locked and disabled, while the back door is still wide open
October 19, 2026

What the ConnectWise Cloud Backup Incident Means for Microsoft 365 Admins

Sometime between October 13th and 17th this year, a malicious threat actor used stolen...

READ NOW
Security
Non-Human Identities
Threat Intelligence
A graphical interpretation depicting phishing-resistant authentication
October 14, 2026

How Adversary-in-the-Middle phishing can bypass MFA in Entra ID

In the ongoing cat and mouse game of security, attackers are deploying new tactics to...

READ NOW
Authentication
Deep Dives
A graphical interpretation depicting app registration permissions
September 28, 2026

App Registration Permissions: Delegated vs Application

Continuing our look at non-human identities within Microsoft 365 – including app regist...

READ NOW
Security
Fundamentals
Microsoft Entra authentication methods diagram showing passkeys, Windows Hello, SMS, password, TAP, email OTP, voice call, and certificate-based authentication.
September 7, 2026

Authentication Methods in Entra ID: A Practical Guide for Microsoft 365 Admins

There are several different authentication methods in Entra ID, but they don’t all prov...

READ NOW
Fundamentals
Authentication
Security
Illustration of application authentication methods, comparing certificates for production use with client secrets for development and testing.
September 4, 2026

How Enterprise Applications Authenticate in Entra ID

In this article, we explore in detail the most secure methods IT teams can use to authe...

READ NOW
Non-Human Identities
Authentication
Fundamentals
Symbol of a person and a key sat within a graphical interface
September 3, 2026

What Microsoft’s Entra ID Passkey Rollout Means for Microsoft 365 Admins

From September 2026, passkeys will become the default method of authentication for Entr...

READ NOW
Authentication
Fundamentals
Symbol of a person and a key sat within a graphical interface
August 27, 2026

Best Practices for Enabling and Enforcing Passkeys in Microsoft Entra ID

Microsoft is rolling out passkeys as its default authentication method from 1st Septem...

READ NOW
Authentication
Beyond the Basics
Flowchart showing decisions between tenant and multi-tenant management using MS Entra
August 17, 2026

Understanding Applications and Non-Human Identities in Microsoft Entra

In Microsoft Entra ID, applications access data alongside people, so like people, they....

READ NOW
Fundamentals
Non-Human Identities

Subscribe to CoreView Intelligence Labs

Get the latest insights on Microsoft 365 security and intelligence, delivered to your inbox. No spam.
We care about your data in our privacy policy
Privacy policy
|
Terms & conditions
|
Terms of service
© YEAR CoreView.
All rights reserved.