We summarise what's exposed and recommend the actions that close it down: password resets, turning on MFA, reviewing accounts, staff awareness and tightening your Microsoft 365 security.
