Blog

This week, Microsoft re-released the November 2024 Exchange Server security updates, now known as November 2024 SUv2. The first release didn’t go so well. The original updates, which went out on November 12, 2024, caused issues with data loss prevention (DLP) rules and transport rules, leading to disruptions in on-premises email flow. You can find…

Microsoft has been accused of using customer data from its Microsoft 365 applications, including Word and Excel, to train its AI models. The controversy arose from the “Connected Experiences” feature, enabled by default in Office apps and allows for Internet-based functionalities like document co-authoring. Critics argue that this feature could be used to scrape user…

Security firm ESET is warning that RomCom, a Russian Advanced Persistent Threat (APT) group, is actively exploiting two zero-day security flaws to plant backdoors on systems. Firefox is being exploited through a use-after-free bug (CVE-2024-9680) in the animation timeline feature, which can lead to code being run in the restricted context of the browser. The…

CEOs are optimistic about the impact of AI and are increasing budgets for IT departments. Research from Salesforce finds that 84% think “AI will be as significant to businesses as the internet,”. The research also found that CIOs are having to serve as Chief AI Officers, with Deloitte research showing 63% of CIOs reporting directly…

Microsoft is taking legal action to disrupt 240 websites owned by a cybercrime group in Egypt. The sites are connected to Abanoub Nady (MRxC0DER), who develops and sells DIY phishing kits under the ONNX brand name. The ONNX name is being used fraudulently to sell the do-it-yourself phishing kits, which are used by many cybercriminals…

Microsoft has long been part of the FIDO Alliance, a consortium of technology companies championing a passwordless future. The company is taking another step to making passkeys the future by introducing API support in Windows 11 for third-party passkey providers. In a November 22 blog post, Microsoft said that it is releasing updates to WebAuthn…

Multi-Factor Authentication (MFA) has become important for user security within Active Directory environments. By implementing additional verification steps, MFA makes it more difficult for adversaries to gain unauthorized access and it is essential for any organization aiming to secure its Active Directory infrastructure. However, despite investing heavily on MFA to stop cyberattacks, top research reports…

Some European Microsoft 365 users started the week this morning without access to Microsoft 365 services. Microsoft said on X that was investigating an issue impacting users accessing Exchange Online and some functionality in Microsoft Teams calendar. The issue mostly appeared to affect users trying to access Outlook through the web browser. Although, some users…

Microsoft updated its roadmap last week to confirm that Intelligent Event Recap is coming to Teams Town Hall and Webinars in January 2025. Intelligent Event Recap, similar to Intelligent Meeting Recap, which was first launched for Teams Premium users in May, 2023, uses artificial intelligence to create an overview of an event with the aim…

Back in June 2024, Microsoft announced the new ‘Copilot+’ PC specification and device type. They also gave a demonstration of Windows Recall, a controversial new feature that takes periodic snapshots of your computer screen, capturing what you’re doing, so you can ‘go back in time’ and remember that website you were doing research on, or…

On this episode of First Ring Daily, Brad Sams and Paul Thurrott discuss the biggest announcements from Microsoft’s Ignite conference for IT Pros this week, as well as the US DOJ formally recommending that Google should be forced to divest itself of its Chrome web browser.

This week at the Ignite 2024, Microsoft announced many new features coming to the company’s web browser, Edge for Business. Because today’s work environment looks very different from just a few years ago, Microsoft continues to adapt to the new hybrid landscape and offer more security-focused features to keep your organization safe and protected. Cybersecurity…