Articles on Microsoft 365 security
Tenant hardening, the right priorities and what we’ve learned in the field.
Entra ID retires SMS and voice sign-in: move to passkeys by February 2027
Microsoft’s built-in SMS and voice codes for Entra ID sign-in stop on 1 February 2027. Who is affected, what happens if you wait, and how to move to passkeys.
How to really improve your Microsoft Secure Score: 6 gaps in manual hardening (and what works instead)
A high Microsoft Secure Score doesn’t mean you can withstand a real attack. The six gaps in hardening through the portal, a comparison with Griffin31, and common questions.
Compromised eMudhra certificates: what to check in your Microsoft 365 environment
The private keys of eight eMudhra intermediate certificates can be recovered by anyone. Browsers and operating systems now block them, so the risk is in devices and apps that are not up to date.
PHP2Shell: two critical PHP flaws, and what they mean for your Microsoft 365 tenant
CVE-2026-109618 and CVE-2026-109619 let an attacker run code on PHP web servers with one request. What to patch, how to check Azure, and how to protect the Entra ID identities those servers hold.
Do we still need NAC in a Zero Trust Network Access (ZTNA) world? Well… it depends.
Scope note: In this article I'm focusing on ZTNA and NAC from the endpoint access perspective, not server and IoT networks. Servers and critical back-end…
Mastering Intune Security Baselines: What’s New in the Latest Windows 11 25H2 Release
Rolling Out Intune Security Baselines: What We See in the Field When working with Microsoft Intune across organizations of all sizes, the concept of…
Malicious URL Protection in Microsoft Teams (Preview): What it is, how it works, and how to turn it on
Malicious URL Protection in Microsoft Teams (Preview) Phishing remains one of the most common and effective attack vectors, and attackers increasingly…
npm Supply Chain Attack: When Open Source Trust Gets Weaponized
Introduction The open-source ecosystem is the beating heart of modern software development. From small web apps to enterprise-scale cloud platforms…
Salesloft / Drift Breach – Attack Analysis
Overview In August 2025, Salesloft (owner of Drift) disclosed a breach that had been active for several months. The attackers moved step by step across…
Windows Backup for Organizations: from device wipe to ready in minutes
How Windows Backup for Organizations, OneDrive Known Folder Move and Enterprise State Roaming get users working again minutes after a new or reset device.
Defender for Identity - Remove Inactive Service Accounts (Preview)
Defender for Identity - Remove Inactive Service Accounts (Preview)A new feature has been released: Defender for Identity can now automatically remove…
What’s New in Microsoft Intune – August 2025
What’s New in Microsoft Intune – August 2025 Microsoft Intune continues to evolve with features designed to solve real challenges IT teams face every day.…
Microsoft Graph API permissions, Entra roles and consent: what to know
How delegated and application permissions differ in Microsoft Graph, why admin consent gives users no new powers, and where Conditional Access stops.
Microsoft Entra External Authentication intgration with Okta IDP routing
Microsoft Entra External Authentication intgration with Okta IDP routing Microsoft recently introduced a powerful new capability in Entra ID called…
Phishing, token theft and CAE: what passkeys alone can’t solve in Microsoft 365
Passkeys, Compliant Device, Token Protection and CAE Strict: what each control protects and doesn’t, where they overlap, and where to start in your tenant.
Unlocking Best‑of‑Both‑Worlds: Okta + Microsoft Security for SaaS-Driven Enterprises
Hey everyone, Here’s a compelling idea: What if you could keep Okta as your SSO hub for hundreds of SaaS apps, yet still tap into Microsoft’s powerful…
The Evolution of M365 Security Threats: Trends to Watch in 2024 and Beyond
As organizations continue to migrate critical business operations to cloud environments, Microsoft 365 (M365) has become a cornerstone for productivity…
Intune Add-Ons vs Alternatives: More Specialized Solutions
While Microsoft Intune Add-Ons can extend functionality for specific needs, there are alternative solutions in the market that may provide greater value…
Cost Optimization with Microsoft 365 Licensing: Best Practices
Cost Optimization with Microsoft 365 Licensing: Best PracticesMicrosoft 365 offers significant flexibility when it comes to managing licenses, which can…
Custom GPT Experiment: Building an M365 Email Assistant
Custom GPT Experiment: Building an M365 Email Assistant TL;DR The Challenge: Email Overload As a technology executive, my inbox is constantly flooded with…
Microsoft 365 app access without overprovisioning: credentials, mail, files
Three Microsoft controls that rein in apps in Microsoft 365: Entra ID authentication policies, SharePoint Selected permissions and mailbox scoping.
Advantages of Automated Security Control Assessment Over Yearly Manual Assessments
As organizations increasingly move their operations to cloud platforms like Microsoft 365 (M365), ensuring a robust security posture is more critical than…
Filevault key rotation
Hi, I’m excited to share my new script, designed to automate and streamline FileVault 2 key rotation on macOS devices. 🌟 Why is this script needed? Intune…
Script to Export BitLocker Recovery Keys for Managed Windows Devices to CSV
This script connects to the Microsoft Graph API for a specified tenant, retrieves BitLocker recovery keys for all managed Windows devices, and exports…
The Importance of Monitoring Security Configuration Changes in M365: Introducing Our Misconfiguration Detection Platform
In today’s cloud-driven world, organizations increasingly rely on Microsoft 365 (M365) for their communication, collaboration, and productivity needs.…
Public Preview of DLP for M365 Copilot in Word, Excel, and PowerPoint
Current file DLP checks: Copilot now respects sensitivity labels on an opened document or workbook. If a document has a sensitivity label and a DLP rule…
From Visibility to Response: The Evolution of Cloud Security with Microsoft Defender for Cloud
Introduction One of the biggest challenges in modern cloud environments isn’t just seeing threats — it’s responding to them. We’ve had the dashboards.…
Defender for Endpoint exclusions: what not to do (6 common mistakes)
Which folders, file extensions and processes you should never exclude in Microsoft Defender for Endpoint, and how to scope an exclusion safely.
Entra ID administrative units: keep C-level accounts out of Helpdesk scope
How to use restricted management administrative units in Entra ID so only an approved team can manage executive accounts, in three steps.
Enhancing Security with E5 Security Add-On For Business Premium Customers
Microsoft has recently announced that Microsoft 365 Business Premium customers can now enhance their security posture by adding the Microsoft 365 E5…
Advanced Threat Protection in Microsoft 365: Best Practices and Common Pitfalls
Microsoft 365 (M365) is a cornerstone for businesses relying on cloud-based productivity tools, offering features like email, file sharing, and…
Best Practices for Securing Microsoft Power Platform
The Microsoft Power Platform—which includes Power BI, Power Apps, Power Automate, and Power Virtual Agents—allows organizations to create custom…
Comprehensive Guide to Avoiding Intune Misconfigurations
Microsoft Intune is a powerful tool for securing devices and corporate data, but misconfigurations can pose significant risks. Here’s a detailed breakdown…
Top 5 Common Misconfigurations in Microsoft 365 and How to Avoid Them
Microsoft 365 (M365) has become a core platform for organizations worldwide, offering powerful tools for productivity, collaboration, and data management.…
Top Security Misconfigurations in Entra ID (formerly Azure AD) and How to Avoid Them
Microsoft Entra ID, formerly known as Azure Active Directory (Azure AD), plays a central role in managing identity and access for organizations. However…
Why Human Error is the Biggest Risk in M365 Security
Microsoft 365 (M365) is a widely adopted platform offering a range of productivity tools that allow employees to collaborate, communicate, and manage data…
Incident Response Best Practices for Microsoft 365: What to Do After a Security Breach
In the world of modern business, Microsoft 365 (M365) has become an indispensable tool for communication, collaboration, and data management. However…
Deception in Microsoft Defender XDR: what it is and how to set it up
A guide to built-in deception in Microsoft Defender XDR: how decoys and lures catch lateral movement early, the prerequisites, and setup in seven steps.
Automatically Submitting Third-Party Reported Messages to Microsoft
Introduction: Great news for organizations leveraging third-party user report add-ins like Knowbe4, Hoxhunt, or Cofense in Outlook: Microsoft has…
How Misconfigurations in M365 Impact Data Privacy: What Your Organization Needs to Know
Microsoft 365 (M365) has become the backbone of communication, collaboration, and data storage for organizations of all sizes. While it offers a vast…
Microsoft 365 Automated Security Assessment Tool
In the fast-paced world of cloud services and remote work, maintaining robust security within Microsoft 365 environments is essential. Microsoft 365…
Microsoft Teams: Enhanced Meeting Protection - Prevent Screen Capture
To address the issue of unauthorized screen captures during meetings, the Prevent Screen Capture feature ensures that if a user attempts to take a screen…
Update: Token Protection in Conditional Access Now Supports the Windows App
Introduction: Microsoft Entra Conditional Access just introduced a critical enhancement — Token Protection now supports the Windows App, extending…
What to Do When You've Reached the Limit of Microsoft 365 Business Premium
What to Do When You've Reached the Limit of Microsoft 365 Business Premium If your organization has reached the 300-user limit of Microsoft 365 Business…
Advanced Techniques for Securing Tokens in Microsoft Entra ID – Part 2
Introduction: Building upon our previous discussion on token fundamentals, this article delves into advanced strategies to enhance token security in…
Windows Autopatch – April 2025 Updates and Key Improvements
Introduction: Over the last few months, we’ve seen a lot of momentum around Windows Autopatch — and with good reason. As environments grow, managing…
Defender XDR: Critical Asset and Shadow IT Containment
Introduction: Microsoft Defender XDR continues to improve its Automatic Attack Disruption capabilities, helping organizations contain attacks earlier and…
Understanding and Managing Tokens in Microsoft Entra ID – Part 1
Introduction: In today’s cloud-based identity environments, understanding how authentication Tokens work — and managing them properly — is critical for…
The High Cost of Manual Security Assessments in Microsoft 365
Microsoft 365 (M365) is an essential platform for organizations worldwide, offering a broad range of productivity tools, including email, collaboration…
No posts match these filters.