Archive
Defender for Endpoint scans macOS devices around the clock, but only after ABM, Intune profiles, and an onboarding package are in place. Here is the rollout order.
Defender for Business ships 24/7 vulnerability scanning with Business Premium. How to onboard devices, read the exposure score, and run an approve-remove-patch SOP.
A malicious OAuth app keeps mailbox access after every password reset. How attackers plant them in Microsoft 365, plus the consent lockdown and hunting runbook.
Exchange Online enforces tenant-wide outbound email limits, E5 Security arrives as a Business Premium add-on, and the Report Message add-in enters maintenance mode.
A Power Automate flow that takes vendor requests from a Microsoft Form, routes approvals through Teams, logs the software inventory, and opens the IT ticket.
Shadow SaaS thrives where no approved software list exists. Build a vendor management policy, an inventory template, and use the three app inventories M365 already keeps.
Most businesses cannot produce an accurate application inventory, and the Microsoft 365 defaults make it worse. Here is the layered plan for CIS Control 2, from OAuth consent to ASR rules.
Microsoft-managed Conditional Access policies start auto-enforcing after 45 days, Skype interop in Teams dies May 1, and Hotpatch hits preview. The February 2025 changes, sorted by deadline.
A hands-on video walkthrough of building two working AI agents in Microsoft Copilot Studio: a loan analyzer that decides and emails applicants, and a Teams-based app access evaluator for IT.
Satya Nadella says AI agents could displace traditional SaaS. We built a working loan-approval agent in Copilot Studio in about an hour to test the claim. Here is what holds up and what is still hype.
Entra keeps sign-in logs for 30 days at most, 7 on the free tier. Here is how to stream them into a Log Analytics Workspace and keep up to two years of evidence, usually for pocket change.
Copilot Chat arrives free for Entra users, Teams flips transcription on by default for new tenants, and small businesses get live chat. The January 2025 M365 changes, sorted by what to check first.
A 5% increase on annual NCE plans paid monthly, Teams Phone going up, Copilot gaining monthly billing and a free chat tier, plus stackable promos. What to lock in before April 1, 2025.
Microsoft blocks 7,000 password attacks per second, yet only 41% of Entra sign-ins use MFA. The data behind the passwordless push, and an honest look at what the passkey experience is like today.
Users refuse enrollment, admins refuse open access. Intune app protection policies plus one Conditional Access rule protect Microsoft 365 data on personal phones without managing the device.
New Outlook migration turns opt-out for SMBs in January 2025, monthly billing on annual terms gets a 5% markup, Viva Goals gets a retirement date, and Teams ships ten quality-of-life features.
By default, anyone with a Microsoft 365 tenant can open a Teams chat with your users. Here is the attack that exploits it and the four controls that break the kill chain.
CloudCapsule connects to a Microsoft 365 tenant and returns a CIS-mapped security assessment with evidence, remediation steps, and a branded executive summary in minutes, not man-hours.
