The Acture October 2025 Cybersecurity Update provides a comprehensive briefing on the rapidly intensifying cybersecurity threat landscape and the real‑world attacks that impacted organizations over the past year. The presentation outlines how AI‑driven threats, adversary‑in‑the‑middle techniques, malicious browser extensions, and stolen MFA session tokens have made traditional defenses insufficient.

Last summer a number of our M365 clients were hit with a “Direct Send” attack.   This attack bypassed high-powered spam filters like Barracuda Email Protection and sent emails directly into M365 without any authentication! The threat actor email actually came from a real person at the client!  The email had a malicious attachment.