Go back

Live Hacking: Exposing the Reality of Microsoft 365 Breaches

Join Huntress CEO Kyle Hanslovan for a live, technical demonstration exposing real-world Microsoft 365 breaches and modern defense strategies.

Partners
November 4, 2025
3m read
3m read
3m listen
3m watch
3m watch
Live Hacking: Exposing the Reality of Microsoft 365 BreachesLive Hacking: Exposing the Reality of Microsoft 365 Breaches
speakers
speakers
speakers
authors
Rajan Kapoor, VP, Security
participants
No items found.
share

Join Huntress CEO Kyle Hanslovan for a live, technical demonstration exposing real-world Microsoft 365 breaches and modern defense strategies.

The evolution of the threats we face today continues at breakneck speed–and our defense strategies need to keep pace. Today’s attackers have credential marketplaces, advanced social engineering, and AI-powered velocity behind them, making your Microsoft 365 security feel uncomfortably porous.

The attacks we see in the real world are faster, more coordinated, and rely on abusing built-in features, integrations, and common misconfigurations to get past your defenses. 

See it in action

Material is proud to partner with Huntress to bring a live, technical demonstration that cuts through the noise and shows you exactly what you’re up against. Huntress CEO and former NSA operative Kyle Hanslovan will walk through a complete, modern compromise of a Microsoft 365 environment, demonstrating the TTPs that are actively used in the wild.

This isn’t a theoretical exercise: it’s a pragmatic look at modern attacks.

  • Social Engineering and Credential Theft: How a motivated attacker leverages social tactics to quickly steal credentials from browsers.
  • MFA Bypass: The real-world techniques attackers use to circumvent Microsoft 365’s MFA policies and gain persistent access.
  • Rapid Lateral Movement: What happens next—the speed at which an attacker can leverage a single compromised identity to rapidly compromise interconnected cloud office systems and wreak havoc.

Why this demonstration matters

The native security tools in Microsoft 365 are powerful, but often lack the visibility and automated responses necessary to stop an attacker after they’ve bypassed the initial login. That doesn’t mean all hope is lost–as part of the demo, Kyle will showcase modern defense strategies that can stop attackers before they can wreak havoc. You’ll leave this demo better prepared to tangle with the threats we face today.

But you don’t want to read a marketing blurb about it: come check out a live demonstration of what’s being exploited, and see a defense strategy built to evolve with the threats we all face. 

Register for the webinar to see the full attack, the immediate response–and get free access to Huntress’s Identity Security Assessment for your Microsoft 365 environments.

Frequently Asked Questions

Find answers to common questions and get the details you need.

No items found.

Related posts

Our blog is your destination for expert insights, practical tips, and the latest news in technology. Stay informed with our regular updates and in-depth articles. Join the conversation and enhance your understanding of the tech landscape.

blog post

The Composio Breach: One token, 10,242 doors

One compromised Gmail token gave attackers a skeleton key to 10,000+ customer credentials — and it's the same OAuth playbook security teams keep underestimating.

Rajan Kapoor, VP, Security
7
m read
Read post
Podcast

The Composio Breach: One token, 10,242 doors

One compromised Gmail token gave attackers a skeleton key to 10,000+ customer credentials — and it's the same OAuth playbook security teams keep underestimating.

7
m listen
Listen to episode
Video

The Composio Breach: One token, 10,242 doors

One compromised Gmail token gave attackers a skeleton key to 10,000+ customer credentials — and it's the same OAuth playbook security teams keep underestimating.

7
m watch
Watch video
Downloads

The Composio Breach: One token, 10,242 doors

One compromised Gmail token gave attackers a skeleton key to 10,000+ customer credentials — and it's the same OAuth playbook security teams keep underestimating.

7
m listen
Watch video
Webinar

The Composio Breach: One token, 10,242 doors

One compromised Gmail token gave attackers a skeleton key to 10,000+ customer credentials — and it's the same OAuth playbook security teams keep underestimating.

7
m listen
Listen episode
blog post

The Open Engine: Smarter Detection Explanations and API v1

Material's May updates make the detection engine more legible for every analyst, and give technical teams the programmatic access to put that intelligence to work outside the UI.

James Juran
5
m read
Read post
Podcast

The Open Engine: Smarter Detection Explanations and API v1

Material's May updates make the detection engine more legible for every analyst, and give technical teams the programmatic access to put that intelligence to work outside the UI.

5
m listen
Listen to episode
Video

The Open Engine: Smarter Detection Explanations and API v1

Material's May updates make the detection engine more legible for every analyst, and give technical teams the programmatic access to put that intelligence to work outside the UI.

5
m watch
Watch video
Downloads

The Open Engine: Smarter Detection Explanations and API v1

Material's May updates make the detection engine more legible for every analyst, and give technical teams the programmatic access to put that intelligence to work outside the UI.

5
m listen
Watch video
Webinar

The Open Engine: Smarter Detection Explanations and API v1

Material's May updates make the detection engine more legible for every analyst, and give technical teams the programmatic access to put that intelligence to work outside the UI.

5
m listen
Listen episode
blog post

Three Ways to Address the Expected HIPAA Encryption Requirements for Email

The fourth in a series on healthcare email security using HIPAA breach data and regulatory analysis.

Material Team
10
m read
Read post
Podcast

Three Ways to Address the Expected HIPAA Encryption Requirements for Email

The fourth in a series on healthcare email security using HIPAA breach data and regulatory analysis.

10
m listen
Listen to episode
Video

Three Ways to Address the Expected HIPAA Encryption Requirements for Email

The fourth in a series on healthcare email security using HIPAA breach data and regulatory analysis.

10
m watch
Watch video
Downloads

Three Ways to Address the Expected HIPAA Encryption Requirements for Email

The fourth in a series on healthcare email security using HIPAA breach data and regulatory analysis.

10
m listen
Watch video
Webinar

Three Ways to Address the Expected HIPAA Encryption Requirements for Email

The fourth in a series on healthcare email security using HIPAA breach data and regulatory analysis.

10
m listen
Listen episode
blog post

What It Really Takes to Unlock AI Adoption: Lessons from the Field

Security leaders from Material Security, Gopuff, and Cotool share hard-won lessons on AI adoption, data privacy, and building trust at scale.

Gian Gonzaga
4
m read
Read post
Podcast

What It Really Takes to Unlock AI Adoption: Lessons from the Field

Security leaders from Material Security, Gopuff, and Cotool share hard-won lessons on AI adoption, data privacy, and building trust at scale.

4
m listen
Listen to episode
Video

What It Really Takes to Unlock AI Adoption: Lessons from the Field

Security leaders from Material Security, Gopuff, and Cotool share hard-won lessons on AI adoption, data privacy, and building trust at scale.

4
m watch
Watch video
Downloads

What It Really Takes to Unlock AI Adoption: Lessons from the Field

Security leaders from Material Security, Gopuff, and Cotool share hard-won lessons on AI adoption, data privacy, and building trust at scale.

4
m listen
Watch video
Webinar

What It Really Takes to Unlock AI Adoption: Lessons from the Field

Security leaders from Material Security, Gopuff, and Cotool share hard-won lessons on AI adoption, data privacy, and building trust at scale.

4
m listen
Listen episode
Privacy Preference Center

By clicking “Accept”, you agree to the storing of cookies on your device to enhance site navigation, analyze site usage, and assist in our marketing efforts. View our Privacy Policy for more information.

New