The State of Microsoft 365 Security - 2025 Survey

49% of IT leaders mistakenly believe that Microsoft automatically backs up their configurations, leaving them vulnerable in the event of a disaster.

51% of respondents have over 250 over-privileged Entra applications with read-write permissions, which poses significant security risks. This contributes to "Privilege Risks," as the increasing number of applications escalates security risks, necessitating tighter governance over permissions.

99.9% of Microsoft account compromises occur in accounts lacking Multi-Factor Authentication (MFA).

68% of organizations face Microsoft 365 cyberattacks daily.