Saa$y MSP Community Call | 2.19.26

Описание: This week’s Saa$y MSP Community Call covered a real-world Microsoft 365 compromise, advanced phishing evasion tactics, and major updates across Fortify, Intune, and compliance initiatives.

From a home builder tenant breach that disrupted operations to sandbox-evading phishing kits hosted on Linode, the team unpacked how modern attackers are targeting businesses — and how SaaS Alerts and Fortify are evolving to stay ahead.

🔎 Key Topics Covered

🛠 Event Hub coordination & ongoing SaaS Alerts project updates
🔐 Microsoft 365 compromise case study (109+ deleted emails, invoice rule manipulation)
📊 Audit log investigation techniques & identifying poor security hygiene
🎯 Targeted attacks disrupting permitting & project closings
🤖 Copilot DLP settings concerns & Dell ESXi vulnerability discussion
🧠 ClickFix variant updates & evolving phishing tradecraft
📈 MSP Bots dashboard demo integrating SaaS Alerts + PSA metrics
📄 Executive-friendly reporting vs automated report overload
🏛 CMMC Level 1 compliance win (90% complete via Kaseya stack)
📋 Customer responsibility matrices & shared compliance models
🔄 Fortify updates: Intune device compliance snapshot + GenAI controls
🧩 Intune + UniFi integration roadmap discussion
🎣 Deep phishing analysis: obfuscation, sandbox evasion & Axios user-agent detection
🧪 Balancing detection accuracy without false positives

💡 Takeaway:
Phishing is evolving with obfuscation, sandbox bypass, and infrastructure agility — but with stronger logging, Fortify controls, compliance frameworks, and smarter detection logic, MSPs can shift from reactive cleanup to proactive defense.

👉 Like, comment, and subscribe for weekly Saa$y MSP insights on cybersecurity, compliance, and SaaS security innovation.

#MSPCommunity #Cybersecurity #SaaSAlerts #Fortify #PhishingDefense #Microsoft365Security #CMMC #Intune #ZeroTrust #IncidentResponse #ManagedServices #CopilotSecurity