Threats

The Threats page shows real-world attacks on Microsoft 365 tenants, such as account takeover, credential theft and phishing, and how well your settings block each step of them.

Instead of reading a threat report and wondering “are we exposed?”, you see the answer for your tenant.

The Threats List

Each threat card shows a short summary, the attack stages, and how many of the related recommendations still need attention.

Sort the list by:

Least mitigated: the threats you are most exposed to, first
Most recommendations: the threats with the most related checks
Newest: the latest threats added by Griffin31

Threat Details

Open a threat to see:

Section	What it shows
Summary	What the attacker does and why it matters
Attack Path	The attack’s stages (for example Initial Access, Persistence, Exfiltration). Click a stage to focus on it
Mitigations	The recommendations that block each stage, with their current state in your tenant
Threat Intel	The public sources the threat is based on

From Threat to Fix

On the Recommendations page, the In threats filter shows every recommendation that is part of a threat’s attack path.
On the Dashboard, Fix These First lists the recommendations that close gaps in several threats at once. These usually give the most protection for the effort.