Rabia Noureen

Microsoft has dropped support for Transport Layer Security (TLS) versions 1.0 and 1.1 for Azure Blob Storage. The company has published a guide to help organizations in migrating clients to newer, more secure encryption standards. TLS is a widely used security protocol that encrypts data in transit between clients and servers, and ensures confidentiality, integrity,…

Microsoft is preparing to retire its standalone SharePoint Online and OneDrive for Business subscriptions (Plan 1 and Plan 2). Commercial customers using these plans will be required to migrate to alternative Microsoft offerings over the coming years as part of a phased transition. What SharePoint Online and OneDrive for Business plans offer? SharePoint Online Plan…

As enterprise AI adoption accelerates, organizations are increasingly turning to platforms designed for their own regions rather than global, one-size-fits-all solutions. Gartner predicts this shift will be dramatic, with the share of businesses using region-specific AI expected to surge from a small minority today to more than a third by 2027. According to new research…

Last month, Microsoft rolled out an out-of-band update to fix a bug that prevented some Windows devices from shutting down or hibernating properly. The company has now acknowledged that this issue also affects Secure Launch-capable PCs with Virtual Secure Mode (VSM) enabled. Secure Launch and Virtual Secure Mode (VSM) are Windows security technologies designed to…

Microsoft is moving to a more secure authentication posture by disabling New Technology LAN Manager (NTLM) by default and shifting to stronger, Kerberos-based authentication. The company has published a phased roadmap to give organizations time to identify dependencies and prepare for NTLM’s disablement in future Windows client releases and the next major Windows Server version….

Microsoft has announced the general availability of centralized Remote Desktop Protocol (RDP) Shortpath configuration through Group Policy Objects (GPO) and Microsoft Intune. The update enables IT teams to centrally enforce and fine-tune RDP Shortpath behavior across Azure Virtual Desktop (AVD) session hosts and Windows 365 Cloud PCs. RDP Shortpath is a Remote Desktop feature that…

Microsoft has announced a major update to Conditional Access (CA) enforcement in Microsoft Entra ID. This upcoming change closes a long-standing loophole and ensures security measures are applied consistently across all sign-ins. Currently, Microsoft Entra ID Conditional Access policies set to apply to “All resources” may not always be enforced in certain situations. This can…

Microsoft has quietly patched multiple flaws in Windows 11’s Administrator Protection feature after Google researchers showed the original design could be bypassed. These flaws could have allowed attackers to obtain administrator privileges on affected systems without user interaction. What is Windows 11 Administrator Protection? Administrator Protection is a security feature in Windows 11 designed to…

Microsoft has rolled out Message Trace support via the Microsoft Graph API in public preview for commercial customers. The update delivers a modern, RESTful interface that lets administrators trace email messages end-to-end across Exchange Online with greater consistency and control. In Exchange Online, the Message Trace feature provides administrators with a way to follow the…

Microsoft has released emergency out-of-band Office security updates to patch a critical Microsoft Office vulnerability that is already under active exploitation. This flaw (tracked as CVE-2026-21509) is being used by attackers in real-world attacks to bypass built-in security protections. The zero-day bug (CVE-2026-21509) is a high‑severity security feature‑bypass flaw in Microsoft Office that originates from…

Microsoft is rolling out an important security change to protect Windows environments from a newly exposed Kerberos vulnerability that could let attackers exploit weak RC4 encryption. The company has urged organizations to act quickly as domain controllers move toward stronger AES‑based encryption to prevent potential authentication risks. The security flaw (CVE‑2026‑20833) is a Kerberos information‑disclosure…

Microsoft has made its Purview Data Security Investigations solution generally available for commercial customers. The new tool is built to expose hidden data risks and reduce investigation timelines from weeks to just hours. According to Microsoft, traditional data investigations often require manual, file‑by‑file reviews, which are no longer practical due to the scale of data…