Security experts offer Microsoft 365 security guidance as more attackers target enterprise cloud environments.