Blog

The Cybersecurity and Infrastructure Security Agency (CISA) has warned that a critical vulnerability in Microsoft SharePoint that was fixed earlier this year is now being actively abused by attackers. This security flaw could allow hackers to compromise victims’ SharePoint servers. CVE‑2026‑20963 is a critical security flaw in Microsoft SharePoint that allows attackers to take over…

Microsoft has made external multi-factor authentication (MFA) generally available in Microsoft Entra ID. The update enables organizations to seamlessly integrate third-party MFA providers into their authentication workflows without losing centralized control. Previously, organizations using Microsoft Entra ID had little flexibility when they wanted to rely on third‑party multi‑factor authentication tools, which often forced them to…

The Federal Communications Commission (FCC) has imposed a ban on certain foreign-made consumer routers entering the United States, citing rising cybersecurity concerns. The regulator said the decision follows a series of attacks that targeted critical infrastructure. The FCC added foreign‑manufactured consumer routers to its official “Covered List” after U.S. national security agencies concluded these devices…

As cyberattacks grow faster and more identity‑driven, Microsoft is enhancing how organizations defend their digital environments. At RSA 2026, the company announced major Microsoft Defender and Security Copilot updates to help organizations defend against the latest threats. Microsoft emphasizes that modern attacks increasingly start with identity compromise, especially as organizations manage dozens of human, non‑human,…

Microsoft has rolled out an out-of-band update to fix account sign-in issues in Windows 11 triggered by the March 2026 update. The emergency patch (KB5085516) is now available for devices running Windows 11 versions 24H2 and 25H2. According to Microsoft, users have reported that the March security update (KB5079473) inadvertently broke the sign-in mechanism for…

Windows file sharing allows any Windows PC to host a file share, making files available to other computers on the same network. Better still, files located within the shared folder are not solely accessible to Windows devices. Apple devices running MacOS can also access the shared folder, as can Linux devices, so long as those…

Microsoft Sentinel is raising the bar for secure collaboration by adding support for Unified RBAC and row-level access controls. The update enables multiple teams to operate within a shared environment while maintaining strict governance, granular visibility, and streamlined management. “This new capability, available April 1st, extends the Microsoft Defender Unified RBAC model to Sentinel, enabling…

The Cybersecurity and Infrastructure Security Agency has issued a new alert urging organizations to harden their endpoint management systems after a recent cyberattack on Stryker exposed critical security gaps. The advisory highlights how weaknesses in administrative controls can be exploited to carry out large-scale disruptions without deploying traditional malware. According to CISA, the attack began…

Microsoft is getting ready to speed up how sensitive email data is purged from Exchange Online. Its upcoming Priority Cleanup V2 targets the original version’s major flaws with faster deletions and a much more streamlined administrative experience. Priority Cleanup is a Microsoft Purview feature that allows authorized administrators to permanently delete specific email content from…

In this episode of First Ring Daily, Brad Sams and Paul Thurrott discuss why developers are favoring Mac over Windows for building AI agents. The discussion also examines hardware advantages and the ease of setting up new technology.

Phishing emails no longer look like scams, and that’s the problem. Security researchers warn that AI-powered attacks have become so convincing that they now form the foundation of modern cybercrime, with even worse tactics expected in 2026. According to Kaseya’s latest email security research, attackers shifted in 2025 from occasionally using AI to relying on…

Identity governance has rapidly evolved from a compliance checkbox into a cornerstone of modern Zero Trust security, especially as organizations adopt cloud-first architectures and AI-driven workflows. I recently sat down with Ramiro Calderon, Principal Product Manager at Microsoft; Jef Kazimer, Principal Product Manager on the Microsoft Security Entra Identity Platform; and Tee Earls, Product Area…