How are you mitigating Eviltoken-style SharePoint and MFA phishing?
We've had several near-breaches involving a phishing technique where a compromised account emails everyone in the victim's address book. The message links to a legitimate SharePoint site, but…