Office 365s Vast Attack Surface & All the Ways You Dont Know Youre Being Exploited Through It

Mandiant incident response managers Josh Madeley and Doug Bienstock describe how thoroughly Microsoft 365 (formerly known as Office 365) extends into corporate networks, describe both sophisticated and simple attacks they’ve detected, and suggest mitigations as businesses rely more heavily on the cloud.

Filmed for the Dark Reading News Desk at Black Hat.
I think one of the things weve realized over the years is that attackers are often just as competent if not more competent, actually
administering
Office 365. And theyre confident enough to modify configurations globally to fit their needs. -- Josh Madeley
Related content:
6 Dangerous Defaults Attackers Love (and You Should Know)
Dark Reading News Desk Returns to Black Hat
Microsoft 365 Updated With New Security, Risk, Compliance Tools
6 Active Directory Security Tips for Your Poor, Neglected AD

Last News
▸ ArcSight prepares for future at user conference post HP acquisition. ◂ Discovered: 07/01/2025 Category: security	▸ Samsung Epic 4G: First To Use Media Hub ◂ Discovered: 07/01/2025 Category: security	▸ Many third-party software fails security tests ◂ Discovered: 07/01/2025 Category: security

**Cyber Security Categories**
Google Dorks Database	Exploits Vulnerability	Exploit Shellcodes

CVE List

Tools/Apps

News/Aarticles

Phishing Database

Deepfake Detection

Trends/Statistics & Live Infos

Tags:
Office 365s Vast Attack Surface & All the Ways You Dont Know Youre Being Exploited Through It