Alliance Tech

09/23/2026

09/01/2026

⚠️ YOUR EMPLOYEES CAN LOG INTO THE REAL MICROSOFT WEBSITE, COMPLETE MFA, AND STILL GET PHISHED.

That is what makes this Microsoft 365 attack particularly concerning for wealth management and financial services firms.

Attackers are abusing a legitimate Microsoft authentication process called OAuth Device Code Flow.

The attack can start with a convincing email:

“Your Microsoft 365 session has expired.”

“Your device needs to be re-authorized.”

“Please sign in again to continue.”

The employee follows the instructions and may eventually see a REAL Microsoft authentication page.

They enter their Microsoft 365 credentials.

They approve MFA.

Everything can appear legitimate.

But the authentication request may have been initiated by the attacker. By completing the process, the employee can inadvertently authorize access for the attacker.

For RIAs and wealth management firms, that creates significant risk.

Microsoft 365 can contain client communications, financial information, documents, SharePoint data, Teams conversations, and access to other business systems.

This is why we tell clients:

MFA is essential, but MFA alone is not a complete identity security strategy.

Financial firms should also consider controls such as:

* Conditional Access
* Managed and compliant devices
* Phishing-resistant authentication
* Application and OAuth controls
* Realtime Identity threat detection
* Sign-in and authentication monitoring
* 24/7 security monitoring and response
* Employee security awareness training

And there is an important lesson for security awareness training.

“Look for a fake login page” is no longer enough.

Attackers are increasingly abusing legitimate cloud services and authentication workflows. Your employees need to know that a real Microsoft login page does not automatically mean the request that sent them there is legitimate.

For financial firms, protecting Microsoft 365 is now a core part of protecting client information.

08/01/2026

Alliance Tech has been named one of St. Louis's Best IT Companies by St. Louis Small Business Monthly for 2026 - the second consecutive year we've earned a spot on the list.

A single recognition is gratifying. Back-to-back tells a different story. It means the response times hold up. The cybersecurity program is trusted. And our team shows up for the clients we serve.

That consistency is what we've spent 25+ years building in St. Louis. It's what our clients experience every day.

If you're evaluating IT partners in St. Louis, we'd love to show you what consistent, expert support actually looks like.

Learn more about this recognition: http://dlvr.it/TThcsS

hashtag hashtag hashtag hashtag hashtag

12/24/2025

As the year comes to a close, we want to thank our clients, partners, and community for the trust you place in us. We’re grateful for the opportunity to support your businesses. We wish you and your teams a joyful Christmas and a safe, successful start to the New Year.