Blog

Security researchers have revealed several new security flaws impacting the “link preview” feature in Microsoft Teams. The cybersecurity company Positive Security discovered four separate vulnerabilities in the feature back in March 2021, which can be exploited by attackers to leak victims’ IP addresses, spoof link previews, and launch denial of service (DoS) attacks targeting Android…

Microsoft has announced the release of a new security baseline package for Windows 10 version 21H2. The Redmond giant detailed that the latest Windows 10 security baseline brings several new policy settings to help enterprise customers prevent PrintNightmare, ransomware attacks, and other security threats. Windows 10 Version 21H2 security baseline with Microsoft Defender Tamper Protection…

Microsoft has announced some important updates for Microsoft Sentinel, its scalable cloud-native SIEM tool that provides AI-powered security analytics in enterprise environments. The Redmond giant has launched a new solution in public preview that should help IT Admins to detect Apache Log4j vulnerabilities. Last week, Microsoft acknowledged the emergence of an Apache Log4j vulnerability (CVE-2021-44228)…

Microsoft has announced the release of a new Skype update, which brings several new platform-specific functionalities. The biggest addition is a “Zoom-In” feature for video meetings that lets users quickly zoom in with their mouse or handy controls on the shared screen. The Zoom-In feature aims to improve the screen-sharing experience in the app by…

Microsoft Edge has started testing a new update that will allow users to capture screenshots from PDF documents. The feature was recently spotted by Reddit user u/Leopeva64-2, and it’s currently available for select Microsoft Edge Insiders in the Canary channel (version 99.0.1111.0). Microsoft introduced the new Web Capture tool in its Edge browser back in…

Last month, Microsoft released the November Patch Tuesday updates to address two Active Directory (AD) Domain Services privilege escalation security flaws affecting all supported versions of Windows Server. But it looks like some customers have not updated their servers yet. The company published a blog post yesterday advising customers to install the emergency fixes on…

Microsoft has announced that the automated key rotation feature in Azure Key Vault is available in public preview. The service was originally announced back in March, and it allows IT admins to set up an auto-rotation policy that rotates their customer-managed key (CMK) stored in Azure Key Vault after a specified period. “Automated key rotation…

Earlier this year, Microsoft unveiled its plans to expand the Secured-Core initiative to its server products to help protect organizations from firmware attacks. The company has recently unveiled its plans to expand the Secured-Core initiative are now available for enterprise customers. “Partnering with leading original equipment manufacturers (OEMs) and silicon vendors, Secured-core servers use industry-standard…

Security Management with Microsoft Defender for Endpoint is a new feature that can be used to apply security configuration to devices that do not enroll into Microsoft Endpoint Manager. In this scenario, Microsoft Defender for Endpoint retrieves, enforces, and reports on policies deployed via Microsoft Endpoint Manager. The devices are joined to your Azure Active…

Microsoft has started rolling out CART captioning support to its Teams collaboration platform, allowing meeting participants to view real-time captions coming from a certified third-party provider. This new capability is one of the top requested features by users and is a great alternative to existing AI-powered live captions available in Teams. “CART (Communication Access Realtime…

Azure Project Bicep, or just Bicep as Microsoft sometimes refers to it, is a new domain-specific language (DSL) for deploying cloud resources using infrastructure as code. If this sounds like Azure Resource Manager (ARM) templates, then you’d be right. ARM templates can now be authored in Bicep or JSON. Infrastructure as code and ARM templates…

Microsoft is introducing the New Commerce Experience (NCE) subscription model for its Cloud Solution Provider (CSP) partners in January 2022. This change will raise the subscription price for Microsoft 365 monthly subscriptions by 20 percent, according to a report from CNBC. New Commerce Experience model to affect Microsoft Office 365 prices for monthly subscriptions The…