Microsoft 365 security,
decoded for MSPs

M365 Roundup, September 2026: Copilot Spending Gets Guardrails and Four Deadlines Land Before Year End

September 2026 in Microsoft 365: MemberOf dynamic rules end November 3, Copilot Business defaults to usage-based billing, Teams blurs external QR codes, and Copilot Cost Management expands.

Copilot Grants No New Access. It Just Makes Years of SharePoint Sprawl Searchable.

M365 Roundup, August 2026: Sharing Links Stop Granting Access by Default

Microsoft Retires SMS and Voice MFA on February 1, 2027. The Part That Breaks First Is Account Recovery.

Inactive SharePoint Sites Keep Their Permissions. Retire Them on a Policy, Not a Hunch.

Abandoned SharePoint sites keep their storage, their sharing links, and their place in Copilot answers. Here is the policy-driven way to inventory, certify, and retire them.

Microsoft Frontier Puts Prerelease Copilot in Your Tenant. Scope It to a Pilot Group First.

M365 Roundup, July 2026: Microsoft Puts an Expiry Date on SMS Authentication

When Someone Quits, Does Their Claude Account Leave With Them?

During an Insider Threat, Copilot Follows the Rules. Your Response Plan Is What Breaks.

In a live insider-threat tabletop, Copilot never broke a rule. It surfaced years of overshared data in minutes using access the employee already had. Here is what to prepare.

Copilot Cowork Automates Real Work. Predicting the Bill Is the Hard Part.

M365 Roundup, June 2026: Copilot Cowork Goes GA, and the Meter Starts Running

Claude's Riskiest Features Are Off by Default. Check Before a Client Turns Them On.

Your Users Connected Claude to Microsoft 365 Before You Did

Claude reaches corporate data through personal accounts, self-service connectors, and an Office extension. Here is how to find the exposure and set the integration up properly.