Microsoft product
Entra passkey profiles auto-enable in March 2026, Teams gains four security features, and standalone SharePoint and OneDrive plans head for retirement. The January 2026 changes, sorted by what to do.
Cyber Essentials v3.3 maps cleanly onto Microsoft 365 Business Premium. Entra, Intune, and Defender for Business cover all five technical controls without buying a single new tool.
Risk-based Conditional Access can block or remediate a compromised sign-in before the attacker touches a file. Here is how Entra scores risk and how to deploy the new Require risk remediation option.
When a vendor gets breached, their compromised guest account walks straight into your tenant. The layered Microsoft 365 model that stops it: sharing defaults, guest MFA, download limits, labels, and access reviews.
Intune Suite capabilities fold into E3 and E5 ahead of July 2026 pricing, Outlook gets DLP Wait on Send, and cross-tenant migration goes first-party. December 2025's M365 changes, sorted by impact.
Adversary-in-the-middle phishing steals session tokens after a successful MFA prompt. Here is how to deploy MFA in 2026 so the stolen phish is worthless.
Always-on GDAP roles hand an attacker every customer tenant your techs can reach. PIM for Groups turns that into just-in-time access with MFA, approvals, and an audit trail.
Ignite 2025 delivered Agent 365, Security Copilot free for E5, and Baseline Security Mode. Plus synced passkeys, Teams impersonation protection, and a full month of M365 changes.
Windows 10 reached end of support in October 2025. Plus GPT-5 becomes Copilot's default model, Authenticator gets jailbreak detection, and Teams adds audio-only recording.
Strong user MFA means nothing if Global Admins carry the exceptions. This 8-level playbook takes tenant admin security from inventory to PIM, alerts, and quarterly access reviews.
One reused local admin password turns a single infected laptop into a fleet-wide incident. Here is how to deploy Windows LAPS through Intune, step by step.
Microsoft's Global Secure Access puts Entra ID in front of internet traffic, on-prem apps, and file shares. Here is what it stops in practice and what it costs.
