Rabia Noureen

Microsoft, Apple, and Google have committed to expanding passwordless sign-in support across all major device platforms. The three biggest tech companies have teamed up to roll out the FIDO passkey technology to iOS, Android, Edge, Chrome, macOS, and Windows in 2023. These platforms already support passwordless sign-in standards, but Microsoft, Apple, and Google are now…

Microsoft is planning to make some changes to the existing authentication policies on its GitHub platform. The company has announced that it will require all developers contributing code to the service to enroll in at least one form of two-factor authentication (2FA) by the end of 2023. GitHub is a popular cloud-based service that allows…

Microsoft has released a new update for its Authenticator app that allows users to generate strong and unique passwords. The new password generation feature started rolling out last month, and it’s now generally available for all customers. Microsoft highlights that the Authenticator app uses an “enterprise-grade password generation algorithm” to generate all new passwords. The…

Microsoft has announced some important changes regarding its Update Compliance service. The company says that Update Compliance will require the use of the cloud-based Azure AD service starting October 15, 2022. For those unfamiliar, Update Compliance is a Windows Analytics service hosted in Microsoft Azure. It enables IT Admins to monitor the deployment status of…

Microsoft is getting ready to drop support for Basic Authentication in its Exchange Online e-mail service. The company is reminding customers that it will begin to permanently disable this feature for select protocols in its multi-tenant service worldwide starting October 1, 2022. Essentially, Basic Authentication means that an application provides a user name and password…

Security researchers at Armis have discovered five critical vulnerabilities in multiple network devices sold by Aruba and Avaya. The security flaws, dubbed TLStorm 2.0, could allow malicious actors to gain complete control of network switches typically used in hospitals, hotels, airports, and other businesses. According to the security researchers, the TLStorm 2.0 vulnerabilities have CVSS…

Microsoft has launched a new standalone version of its Defender for Business solution for commercial customers. The new cost-effective enterprise-grade endpoint security offering was first announced at Ignite 2021, and it’s designed for small to medium-sized businesses with up to 300 employees. The Redmond giant started rolling out Microsoft Defender for Business to organizations with…

Last week, QNAP published a security advisory to warn customers about new critical flaws in an open-source fileserver technology integrated into its network-attached storage (NAS) devices. The company has advised customers to look out for updates to address the vulnerabilities affecting some of its products. QNAP explained in its advisory that these flaws exist in…

Microsoft unveiled its plans to launch the Lists app for Android at its Ignite conference back in November 2021. The Redmond giant has now announced on the Microsoft 365 Admin center that the Lists app is now available to download for business and enterprise customers from the Google Play Store. First launched in 2020, Microsoft…

Microsoft has published a monthly roundup of the updates made to its Teams collaboration service during the month of April. This includes new chat & collaboration features (such as suggested replies), enhancements to the meetings experience, new Teams certified devices, and much more. Here’s a look at everything you need to know. Microsoft Teams’ Presenter…

Microsoft has released new patches to address critical security vulnerabilities affecting its Azure PostgreSQL product. Discovered by security researchers from Wiz Research, the “chain” of flaws dubbed “ExtraReplica” could be exploited to gain unauthorized cross-account database access. According to the security advisory published by the Wiz Research team, the vulnerabilities allow attackers to bypass tenant…

Microsoft has released built-in authentication support for its Azure Container Apps, a new fully managed serverless container service. The feature enables developers to secure external ingress-enabled container apps without writing code. The Redmond giant launched Azure Container Apps at its Ignite conference in November 2021. It is a serverless hosting solution that builds on Azure…