Turn off IMAP and POP before someone else uses them
Legacy protocols skip modern MFA. They are still on in tenants that were migrated in a hurry.
ITSIGN Administrator · October 15, 2025 · 2 min read
If a phone from 2016 is the reason IMAP is on, replace the phone. Do not leave a hole for the whole company.
Check sign-in logs for basic auth. Disable it. Watch who yells. Fix those clients.
This is a one-afternoon item in cloud and Microsoft 365.
Related reading
Email retention, PIPEDA, and the mailbox you never deleted
Keeping everything forever is not a strategy. It is a larger breach waiting for a number.
2 min read
When the phish comes from a vendor you trust
Their tenant, your payment. Callback still wins. So does knowing who is allowed to change details.
2 min read
External email banners that help instead of training people to ignore them
If every newsletter is tagged EXTERNAL, staff will stop reading the tag. Tune it.
2 min read
Want this applied to your environment?
A short conversation, an honest assessment of your current setup, and a clear proposal. No obligation and no pressure.