Office 365: prone to security breaches?

This blog post explains that Office 365 environments are frequently targeted via credential theft and phishing because of their predictability; attackers use stolen credentials and automation to access many similar cloud tenants, often enabling business email compromise and payment fraud. The author emphasizes that Office 365 offers security features (notably multi-factor authentication) that are underused, and provides a quick detection step—checking Azure AD Risky sign-ins (e.g., impossible travel)—to identify potential compromises.