Yara Bakeer
SC-200, AZ-500, SC-300
Yara specialises in proactive threat hunting, security awareness and cyber security education. She combines technical threat analysis with user-focused security initiatives to help organisations strengthen their overall resilience.
6 articles
What Is Vishing? How Voice Phishing Works, From Fake Help Desk Calls To Teams, And How To Stop It
Vishing is phishing by phone or voice call. How it works, from fake help desk calls on Teams to cloned voices, and the checks and Microsoft 365 controls that stop it.
FundamentalsWhat Is Social Engineering? How Attackers Manipulate People, And What AI Has Changed
Social engineering manipulates people into handing over access, money or data. The main types, what AI has changed and the Microsoft 365 controls that help.
FundamentalsWhat Is An RMM Tool? Why Attackers Love Remote Monitoring And Management Software, And How To Spot Rogue Agents
RMM tools let IT manage devices remotely, and attackers love them for the same reason. How RMM gets abused and how to find unapproved agents in Defender.
FundamentalsWhat Is ClickFix? How The Paste-And-Run Lure Works, And How To Stop It
ClickFix tricks people into pasting and running an attacker's command themselves. How the lure works, why it beats email filters, and how to stop it.
Microsoft SecurityWhat Is An Insider Threat? Types, Warning Signs And How To Detect Them In Microsoft 365
An insider threat is harm caused through legitimate access. The four types, the warning signs, and how to detect insider risk in Microsoft 365.
Threat ResearchCrystal PDF Malicious Installer Campaign
A fake PDF editor pushed through Google Ads and SEO poisoning, stealing browser credentials and session tokens. Full IOCs, a KQL hunting query, and how to respond.
Talk to the people
who do the work.
A demo against your own estate rather than a canned one, run by an analyst rather than a salesperson.