Blog

Microsoft is making passwordless sign-ins more secure and accessible for desktop users by extending Windows Hello Enhanced Sign-in Security (ESS) to compatible external fingerprint readers. This update enables hardware-backed biometric authentication on more Windows 11 devices, which helps protect sensitive data from sophisticated cyberattacks. Windows Hello Enhanced Sign-in Security (ESS) is an advanced security feature…

Seasonal hiring for many organizations means creating large numbers of workforce identities in a short space of time. New starters need immediate access to systems and data, often before IT has had an opportunity to get to know them. That pressure can introduce gaps in the onboarding process, not because IT teams don’t care about…

Microsoft’s July 2026 update for Sentinel introduces new capabilities to streamline detections-as-code workflows for commercial customers. The release also improves data lake visibility and expands data connector coverage, giving security teams broader access to security signals through a unified platform. Microsoft introduced a new feature that allows security teams to manage custom detections as code…

In this episode of First Ring Daily, Brad Sams and Paul Thurrott discuss Microsoft’s earnings results for the fourth quarter of its fiscal year 2026, in which the company’s spending on AI infrastructure increased dramatically.

Many organizations are rushing to adopt artificial intelligence (AI), but according to Troy Norcross, AI Governance Advisor and Founder of SERTeam, they are approaching the challenge from the wrong direction. In a recent episode of Petri Dish, Norcross explained that too many companies are starting with AI and looking for places to use it, rather…

Microsoft is making Linux security compliance significantly easier by bringing CIS Benchmark auditing directly into Microsoft Azure. This new feature gives organizations a built-in way to continuously assess and track security posture across cloud and hybrid environments. CIS Security Benchmarks are a set of globally recognized security best practices designed to help organizations securely configure…

Microsoft has introduced a new Exposure Resolution dashboard experience in Microsoft Security Exposure Management. This new feature is designed to help security teams focus on the most important risks instead of sorting through large volumes of findings and disconnected dashboards. Security teams are overwhelmed by a growing number of vulnerabilities, exposure findings, and security alerts…

This guide focuses on when admins should use Windows troubleshooting tools like Event Viewer, Reliability Monitor, System File Checker, SFC/DISM, Windows Update logs, and core network commands. Most Windows troubleshooting failures happen because administrators start with repair commands instead of evidence. Running SFC, DISM, or a Windows Update reset before identifying the failing subsystem wastes…

Cybercriminals are exploiting Microsoft Teams voice phishing (vishing) campaigns to infiltrate corporate networks and deploy Chaos ransomware. Security researchers warn that the campaign targeted dozens of organizations between February and June 2026. According to a new report from Sophos, this campaign (tracked as STAC474) focused mainly on organizations in the United States and Canada. It…

Microsoft is investigating two issues affecting Microsoft Defender for Endpoint on Linux, including a newly confirmed bug that could leave some systems without active threat protection after a reboot. The issue may expose affected Linux devices to potential security risks. According to Microsoft, Defender for Endpoint on Linux may stop working after an upgrade or…

Microsoft’s July Intune update introduces several improvements to simplify day-to-day device management. This release includes enhanced Windows sync visibility, custom compliance settings for macOS, and improved control over Samsung firmware updates. The Microsoft Intune admin center now provides a more transparent sync process for individual Windows devices. This update allows administrators to monitor sync progress…

Microsoft has integrated Microsoft Defender capabilities into the Agent 365 ecosystem to monitor AI agents in real time as they execute tasks. This enables security teams to evaluate agent behavior continuously, rather than relying solely on pre-deployment testing or static security reviews. Microsoft highlighted that AI agents can act on their own, which involves accessing…