🎯31 daily security challenges for Cybersecurity Month. Start Playing
Cybersecurity Awareness Month 2026

Play the challenge. Don't get tricked.

No tricks get inNo treats get out

See this week's challenges
CostFreeFree to play, no sign-up
Time1–2 minPer challenge
PlayersEveryoneFor IT admins and every employee

Stay Breach-Ready This Halloween

31 days to play, share and learn your way ahead of attackers.

Play

Play. Learn. Repeat.

A new challenge every day this October. Spot the fake sign-in, stop the breach, climb the ranks.

31 daily challenges ¡ 2 min each
Play today's challenge
Share

Security on every wall.

Download, print, and put them around your office. Share practical security tips with everyone.

Free download ¡ no sign-up
Grab posters
Learn

Explore the 2022–2025 editions.

Four years of security series and guides for Microsoft 365 admins.

Security Blogs ¡ Resources
Open the archive

This Week's Haunt

Pick a day, play the challenge, and collect your treats as stars.

Your rank Unranked
Defense rating 0/100
1 Week 1 0/7 cleared
2 Week 2 0/7 cleared
3 Week 3 0/7 cleared
4 Week 4 0/7 cleared
5 Week 5 0/3 cleared
0/31 Cleared
Month

Make Good Security Contagious

This Halloween, let good habits spread like a zombie outbreak

Pick a poster, download it, and pin it where your team will see it.

Watch What You Spill
Download
MFA Prompt Aren't Terms & Conditions
Download
A Good Deal Can Still Be A Bad App
Download
That Password Has Been Through Enough!
Download
The Most Dangerous Worm Lives Inside Your Apple
Download
Coffee Shop Wi-fi is a Megaphone, Not a Whisper
Download
Don't Fall For "Free" Emails Verify Before You Click
Download
Offboard The Account, Not Just The Person
Download

Watch What You Spill

Intelligence Archive

The threats evolve. So does the way we fight them.

Explore our cybersecurity awareness journey through the years.

2022

Oops, Missed Security Settings!

Essential Microsoft 365 security settings that admins often overlook, with simple steps to put them right.

Explore edition
2023

Beyond the Basics: The Zero-Trust Playbook

Strengthen your security model with advanced settings that add depth to everyday protection.

Explore edition
2024

Raise the Secure Score, Raise the Security

Practical guidance on Secure Score recommendations, and the essential protections the score doesn't cover.

Explore edition
2025

Secure Everything from AD to Cloud

Find and close security gaps across AD, Microsoft 365, and hybrid environments before attackers find them.

Explore edition

Security Myths That Refuse to Die

Some beliefs keep coming back. Unwrap each one: myth or fact? Every myth you bust is a treat.

Belief 1 of 4

“Client secrets are completely safe for apps.”

Myth
Fact

Client secrets can be leaked, extracted, or misused if stored insecurely, putting applications and data at risk.

Belief 2 of 4

“When a user is deleted, the AI agents they built stop too.”

Myth
Fact

Agents and app registrations keep running, now without an owner, and keep their access.

Belief 3 of 4

“Disabling an account doesn't end its active sessions.”

Myth
Fact

Existing tokens can stay valid. Revoke sessions as well as blocking sign-in.

Belief 4 of 4

“Break-glass accounts don't need MFA.”

Myth
Fact

Break-glass accounts are high-value targets, leaving them without MFA makes them even more vulnerable.

Bust more myths

From AdminDroid team ¡ October 2026

Security is a team effort. Thanks for being part of it this month.

  • May every MFA prompt you see be one you started.
  • May no stale guest account come back from the dead.
  • May no uninvited bot haunt your meetings.
  • May every link in your inbox be a treat, not a trick.
  • May Copilot never dig up a file nobody was meant to see.
  • And may the scariest thing you open this week be a horror film, not a phishing email.
— Team AdminDroid
Know Before You Play