Inception Security @Inceptionsec

Securing SMBs with Microsoft licensing (Defender/Sentinel). Free Inception Foresight M365 assessment: https://t.co/Hp7w9uOKVk inceptionsecurity.com Secure Location Joined October 2021

Tweets

108
Followers

888
Following

3
Likes

12

Inception Security @Inceptionsec

4 days ago

If you are responding to the Cisco 0-day, make sure you are taking breaks. Make sure to hydrate and get that charcuterie board. If you are needing help responding to the 0-day. We will help you out. Hit us up. Pro tip: look for missing message id 302013 and 302014.

0 0 1 27 0

Inception Security @Inceptionsec

a week ago

Just discovered a wild vulnerability in Entra ID Actor Tokens that could've handed hackers Global Admin access to your tenant, like, total takeover with barely a trace. Microsoft patched it (CVE-2025-55241), but it's a wake-up call for monitoring those old APIs. Dive into the…

0 0 0 99 0

Inception Security @Inceptionsec

3 weeks ago

New in Microsoft Teams: Built-in detection for malicious URLs in chats—rolling out now to combat phishing spikes (up 30% in Q3 2025). Great step, but for mid-sized teams (5-1,200 users), oversharing in channels + weak Defender configs still leave doors wide open. Pro tip: Layer…

0 0 0 50 0

Inception Security @Inceptionsec

3 weeks ago

CVE-2025-53786 Alert: Hackers could escalate from on-prem Exchange to full M365 takeover in hybrids. SMBs, don't let this hit you! Quick fixes: Re-run HCW, boost Sentinel monitoring, and enforce CA policies. Read our blog for the full breakdown + free tips:…

0 0 0 103 0

Inception Security @Inceptionsec

3 weeks ago

Just days after Microsoft's Sept 2025 Patch Tuesday fixed 81 vulns (including 2 zero-days), CISA warns: CVE-2025-53786 in Exchange hybrids could let hackers escalate from on-prem to cloud—total identity takeover risk for SMBs. No exploits yet, but "likely" per experts. Is your…

0 0 0 122 0

Inception Security @Inceptionsec

3 weeks ago

“We already have MFA, so we’re secure.” That’s the most common (and most dangerous) belief we hear from businesses. Here’s the truth: - Hackers bypass MFA every single day using Legacy Authentication. - It’s an old login method that doesn’t support MFA. - If it’s enabled, a…

0 0 0 49 0

Inception Security @Inceptionsec

4 weeks ago

🚨 79% more breaches. That’s what Microsoft’s 2025 report found when companies stacked too many security tools. More tools ≠ more security. More tools = more chaos. The fix? 👉 Simplify. 👉 Unify. 👉 Secure employee access without hiring a big security team. Here’s how we do…

0 0 0 53 0

Inception Security @Inceptionsec

4 weeks ago

Most Microsoft 365 environments have 7 hidden security gaps. Hackers know them. Do you? Here’s what you get for FREE: ✅ Full Microsoft 365 Security Assessment ✅ Detailed risk report ✅ Action plan aligned to Microsoft best practices ✅ Backed by Inception Protection 👉 Read…

0 0 0 41 1

Inception Security @Inceptionsec

a month ago

🚨 New Blog: A zero-day DOM-based extension clickjacking attack is targeting password managers. ✔️ Hidden form fields ✔️ Overlay deception ✔️ Autofill exploited in a single click Our breakdown → how it works, who’s vulnerable, and what you should do now.…

0 0 0 62 0

Inception Security @Inceptionsec

a month ago

🚨 MFA ≠ Safe 🚨 Hackers don’t just bypass MFA in Microsoft 365 — they make it theirs. ➡️Legacy auth ➡️AiTM phishing ➡️OAuth consent ➡️Adding their own MFA device We built KQL hunts + a response playbook. 🛡️ inceptionsecurity.com/post/the-1-mic… #M365 #CyberSecurity #MFA #ThreatHunting…

0 0 0 65 0

Inception Security @Inceptionsec

2 months ago

Ransomware has leveled up in 2025. It’s not just “lock the files and hope for a payout” anymore. Now it’s AI-powered evasion, data theft before encryption, and attackers blending into normal activity so well they look like part of your IT team. We put together a guide that…

0 0 0 41 0

Inception Security @Inceptionsec

2 months ago

New blog: How threat actors abuse Microsoft 365 Direct Send to bypass controls and land “internal” phish in inboxes. We cover IOC hunting, connector scoping, RejectDirectSend, and DMARC hardening—plus a free M365 assessment. Read now👇 inceptionsecurity.com/post/microsoft… #M365 #Defender…