Blog

When we consider Microsoft Intune Endpoint Privilege Management as a solution, we have a very real problem that’s being solved. Admin rights. Technical solutions are there to solve a problem, right? Without a problem, a solution is just a gimmick – a token – a gesture, at best. As Bill Gates is said to have…

Microsoft has reiterated that it will not relax Windows 11’s stringent hardware requirements to entice Windows 10 users to upgrade. The company detailed that a TPM 2.0 module is a non-negotiable requirement for boosting Windows 11’s security baseline. What is TPM? Microsoft introduced TPM 2.0 (Trusted Platform Module version 2.0) as a requirement with the…

Samsung has revealed that its upcoming One UI 7 update will discontinue support for the DeX app on Windows. The company is urging DeX users on Windows PCs to transition to Microsoft’s Phone Link app as an alternative. What is DeX for Windows? DeX for Windows is an app that allows users to connect their…

Microsoft has announced the general availability of Security Exposure Management. This new solution allows IT administrators to assess and reduce threat exposure within their organization. Microsoft initially launched Security Exposure Management in preview back in March. It consolidates data across devices, identities, applications, and hybrid environments to provide a unified view of an organization’s attack…

In this guide I’ll show you how to install the Azure Arc agent on Windows Server using the Azure Portal onboarding flow and PowerShell scripts. You’ll also learn about the Azure Connected Machine Agent (CMA), tray icon visibility, proxy configurations, and advanced troubleshooting techniques. For those managing hybrid environments with Linux, don’t miss my complementary article on Installing Azure Arc Agent on Linux to achieve a unified management strategy….

Microsoft is about to release a new update for the new Outlook for Windows client, allowing users to seamlessly move emails between accounts. This functionality will be governed by IT policies, giving administrators precise control through Exchange PowerShell. “By enabling this policy, admins can grant their users the ability to move emails between accounts in…

Cybersecurity researchers have discovered a new phishing kit, dubbed Rockstar 2FA. The exploit toolkit enables hackers to steal Microsoft 365 credentials by bypassing multifactor authentication through sophisticated adversary-in-the-middle (AitM) attacks. According to a new report published by Trustwave SpiderLabs, Rockstar 2FA is an updated version of the DadSec kit. Microsoft has identified that the toolkit…

The US Federal Trade Commission has reportedly launched an antitrust investigation into Microsoft. The Federal agency is scrutinizing Microsoft’s cloud computing, software licensing, cybersecurity, and AI businesses. Last month, the Financial Times reported that the FTC was preparing to launch an investigation into Microsoft’s cloud computing business. The agency was planning to investigate accusations that…

Second only to Generative AI, cybersecurity is top of mind for organizations across the globe. But with Microsoft’s rapid release approach to cloud-based and cloud-enabled security features, how do you make sure you have the basics covered? In this short guide, we’ll walk through the first 4 steps you should consider when implementing or securing…

This week, Microsoft re-released the November 2024 Exchange Server security updates, now known as November 2024 SUv2. The first release didn’t go so well. The original updates, which went out on November 12, 2024, caused issues with data loss prevention (DLP) rules and transport rules, leading to disruptions in on-premises email flow. You can find…

Microsoft has been accused of using customer data from its Microsoft 365 applications, including Word and Excel, to train its AI models. The controversy arose from the “Connected Experiences” feature, enabled by default in Office apps and allows for Internet-based functionalities like document co-authoring. Critics argue that this feature could be used to scrape user…

Security firm ESET is warning that RomCom, a Russian Advanced Persistent Threat (APT) group, is actively exploiting two zero-day security flaws to plant backdoors on systems. Firefox is being exploited through a use-after-free bug (CVE-2024-9680) in the animation timeline feature, which can lead to code being run in the restricted context of the browser. The…