The Client's Website Got Blocklisted, Then ZAP Came for Their Inbox
A URL reputation hit turned ZAP against a client's own mail. How we proved it, beat the quarantine expiry clock, and released 1,600 messages safely.
Exchange Online
The Vendor Was the Phish: Responding to an AiTM Compromise in Microsoft 365
A trusted vendor's share link led to AiTM token theft and a phishing run from our user's mailbox. How we scoped it, cleaned it up and what stops it.
Shutting Down Direct Send in Microsoft 365 (Without Breaking Your Printers)
Block unauthenticated Direct Send spoofing in M365 without breaking legacy apps and printers. Find your legitimate senders, create inbound connectors, and flip RejectDirectSend.