Overview Power Pages continues to enhance its default security framework and empowers users to confidently use the platform. As organizations increasingly rely on Power Pages for their external-facing portals, it’s essential to stay ahead of malicious actors who may attempt to exploit these sites for phishing. The Phishing[…]

Leading Through the Worst Day Incident response is never orderly. Threat actors don’t wait. Environments are compromised. Data is missing. Confidence is shaken. But for Microsoft’s Incident Response (IR) team, that chaos is exactly where the work begins. In Episode 1, we showed how Microsoft Threat Intelligence and the[…]

On September 18, 2025, Fortra published a security advisory regarding a critical deserialization vulnerability in GoAnywhere MFT’s License Servlet, which is tracked as CVE-2025-10035 and has a CVSS score of 10.0. The vulnerability could allow a threat actor with a validly forged license response signature to deserialize an[…]