@Xavier oh, I see what you mean. This isn't against our #website, it's logins against #MicrosoftExchangeOnline via an #API trying to #hack into accounts. They're not even using great #passwords to spay with lol. We have #MFA enforced across the #enterprise, #PasswordPolicy is well designed, and #governance in play. I could put additional controls in place, sure, but we don't have a requirement too do so, and we feel satisfied about where we're at - good blending of security and usability.