Five of the Oct 14 MOVEit Transfer fixes are about how users sign in: LDAP sign-on, LDAP certificate auth, OIDC replay, OAuth restrictions and email MFA. After upgrading (2025.1.6 on the 2025.1 line, 2026.0.4 on 2026.0), do three things. First, review recent sign-ins for accounts that logged in with no MFA step, or from new IPs, since early October. Second, check Secure Messaging and Ad Hoc package activity for packages sent by accounts that don't normally send them. Third, if the web interface is internet-facing only for partners, restrict it to their IP ranges. Also turn on file and admin audit export if you haven't, so any later investigation has logs to work from.