Unironically best opsec I've read about in a while. In times of Deepfakes, people really underestimate the level of fakes they can receive. I've seen companies

Unironically best opsec I've read about in a while. In times of Deepfakes, people really underestimate the level of fakes they can receive. I've seen companies getting scammed with spoofed phone calls where they didn't have a policy to call back to prevent numbers being spoofed etc. Most of the private data is available online, so you always have to assume that e.g. a workflow via email or phone can be malicious by default. In an alternate reality M$ Outlook would be a product for the receivers of email, and not a business product for spammers.