Governed Today

A password reset doesn't end access when the attacker holds a certificate.

• Teams fake IT support led to ESC1 and ESC8 abuse of AD CS, and one account excluded from automatic attack disruption
• SMS and voice stop counting for self-service password reset (MC1536049), and passkeys don't fill the gap
• Teams Facilitator gets a Protection skill that warns about social engineering in external meetings (MC1536056)
• Power Platform prompts move off Anthropic and Grok models on 2 Dec (MC1536101)
• MadApe device code phishing, critical Langflow flaws, the VOLTA infostealer and CERT-SE's freezer attacks

This episode is AI-voiced (NotebookLM) from Ted Johansson's curated daily M365 and cyber governance digest.