08/31/2026
MFA is important, but your team still needs to know what they’re approving.
Microsoft has warned about attackers abusing the password reset process for Microsoft accounts.
The scam can start with a real authentication prompt while someone on the phone pretends to be IT support.
They may say they’re helping fix an account issue and ask the employee to approve the request.
But if the employee approves it, attackers may be able to reset the password, take over the account, and access company data.
For CPA firms in Metro Atlanta, that could put client files, tax documents, payroll data, OneDrive folders, email, and Microsoft 365 accounts at risk.
Remind your team:
✅ Don’t approve unexpected authentication requests
✅ Never reset passwords based only on a phone call
✅ Verify IT support requests through a known contact method
✅ Report suspicious prompts immediately
✅ Use clear internal processes for account changes
Cybersecurity is not just about tools. It’s also about making sure your team knows when to pause and verify.
Custom Technologies, Inc helps CPA firms in Acworth and surrounding Metro Atlanta areas secure Microsoft 365, protect client data, and reduce cybersecurity risk.
Let us manage your network so you can manage your business.
Schedule a free assessment today - https://bit.ly/3IpHjBk