A controller calls at 8:15 a.m. because an employee’s mailbox is empty. The employee clicked through a convincing Microsoft 365 sign-in page the previous afternoon, and an attacker used the account to create inbox rules, delete messages, and send fraudulent payment requests. This business email recovery example shows why recovery is not simply a matter […]