New ways to secure email use old tools like transport rules, some are anti-phishing rules, some are cloud app security policies, some are conditional access.
Managed Service Providers are now a favorite target of hackers and their ransomware attacks. Everyone should now be woke and perform an internal security audit.