Blog

AI has become the backbone of modern ICT roles that demand urgent action from IT leaders to reskill teams and redesign workflows. Cisco’s 2025 report reveals that nearly 80% of tech roles require AI fluency, which makes strategic workforce transformation a top priority. According to a new study by Cisco’s AI Workforce Consortium, 78 percent…

Cybersecurity researchers have discovered a critical privilege escalation vulnerability in Microsoft Entra ID (formerly Azure Active Directory). This security flaw could allow hackers to compromise any Entra ID tenant worldwide. Security researcher Dirk-jan Mollema reported this vulnerability (tracked as CVE-2025-55241) to the Microsoft Security Research Center (MSRC) in July. This flaw, which received a CVSS…

Microsoft has begun rolling out a new Copilot Chat integration across Microsoft 365 apps. This new feature enables users to access the Copilot AI assistant seamlessly as a sidebar within Word, Excel, PowerPoint, Outlook, and OneNote. This new free version of Copilot Chat is designed to help users ask questions, draft documents, create presentations, analyze…

Microsoft has announced that Azure Kubernetes Service (AKS) Automatic is now generally available for commercial customers. AKS Automatic is a fully managed mode of Azure Kubernetes Service that delivers a secure, scalable, and developer-friendly Kubernetes environment with minimal setup. The challenge of managing Kubernetes Kubernetes is a useful system for managing containerized applications, but it…

Learn how to harness the power of PowerShell to manage a specific SharePoint Online site with Connect-PnPOnline. This guide walks you through installing the Connect-PnPOnline PowerShell module, connecting to SharePoint Online using the Connect-PnPOnline command, and exploring the capabilities of the SharePoint Online PowerShell module for seamless site administration and automation. What is PnP PowerShell?…

Microsoft and Cloudflare have teamed up to disrupt RaccoonO365, a notorious phishing-as-a-service (PhaaS) operation. The phishing platform enabled cybercriminals to steal thousands of Microsoft 365 credentials across nearly 100 countries. Microsoft explained that the RaccoonO365 hacking group (also known as Storm-2246) has been active since July 2024. Earlier this month, Microsoft’s Digital Crimes Unit (DCU)…

Microsoft has rolled out the public preview of Windows 365 Cloud Apps, a service that lets organizations stream individual applications directly from the cloud. Instead of assigning each employee a full Cloud PC, IT admins can now provide secure, app-only access, which is ideal for flexible, task-based roles. Microsoft says organizations can now use a…

Microsoft has announced several new capabilities for its Windows 365 Boot service. This release brings support for direct access to the Connection Center, improved troubleshooting tools, cross-region disaster recovery, and more. What is Windows 365 Boot? Windows 365 Boot is a feature that allows users to log directly into their Cloud PC from a physical…

Researchers have identified a new ransomware strain, HybridPetya, which merges the encryption tactics of Petya with the destructive wiping capabilities of NotPetya. The malware leverages a patched vulnerability to bypass UEFI Secure Boot on unrevoked Windows systems. This ransomware-bootkit combo malware was first discovered by ESET researchers in February 2025. They named this malware HybridPetya…

Active Directory (AD) has been around a long time, but it remains the primary target for attackers. Research shows that nine out of ten breaches involve AD or Entra ID. Many environments today are hybrid, which further complicates keeping organizations secure. While free tools give you a quick snapshot of risk, enterprise grade security requires deeper…

Microsoft has reminded customers that Windows 10 will officially reach its end of support next month. On the same date, Windows 10 2015 LTSB and Windows 10 IoT Enterprise LTSB 2015 will also lose extended support. Microsoft will stop providing security updates, bug fixes, or technical support for Windows 10 after October 14, 2025. The…

Cybersecurity researchers have disclosed VoidProxy, a sophisticated phishing-as-a-service platform that enables attackers to intercept login credentials and session tokens in real time. VoidProxy poses a growing threat to enterprise customers across Microsoft 365, Google Workspace, and federated identity providers. Okta’s Threat Intelligence team discovered and analyzed the VoidProxy phishing-as-a-service platform. They describe it as scalable,…