Watheq Zboun

I have been doing many shadow AI assessments recently. If you are interested in one please let me know.

Have you wondered how hacekrs bypass MFA? Nowadays it is getting easier. There is a phishing kit called Mirage2FA that has been working against Microsoft 365 since late 2024.

Here is how it goes. The user lands on a fake login page. They type their password. They approve the MFA...

For the past couple years I kept asking the same question: how does Microsoft plan to move everyone to passwordless when a brand new user cannot register a passkey in the first place? Because that is the catch. Registering a passkey requires MFA, and a brand new user has nothing...

Cyber Insurance in 2026

Have you wondered what Cyber Insurance carriers are actually requiring in 2026? Most of my clients fail at least 2 of these when I audit their environment.

Here's the checklist insurers are using:

→ MFA enforced on ALL accounts — not just "enabled."...