Blog

Security researchers have warned about a new attack campaign that targets Microsoft’s Remote Desktop Protocol (RDP) services. Nearly 2,000 malicious IPs have specifically hit RD Web Access and RDP Web Client authentication portals in recent days. Threat intelligence firm GreyNoise detected a significant increase in RDP scans from around 2,000 IP addresses on August 21….

Microsoft has launched the Phishing Triage Agent in public preview, seamlessly integrated into Microsoft Defender as part of its expansive Security Copilot initiative. Designed to automate and speed up the analysis of user-reported phishing emails, the agent aims to reduce response times and lighten the load on security teams. The launch of Microsoft’s new Phishing…

Microsoft has announced plans to reduce the Delicensing Resiliency threshold from 10,000 to 5,000 non-trial Exchange Online licenses. This update gives mid-sized enterprises stronger safeguards against accidental mailbox disruptions. The Delicensing Resiliency feature in Exchange Online is designed to protect organizations from accidental or unintended removal of mailbox licenses, which can disrupt email access and…

Microsoft has announced an Extended Security Update program for Exchange 2016 and 2019, as well as Skype for Business 2015 and 2019. This program will let organizations that aren’t yet ready to upgrade to the Subscription Editions continue to receive security updates for these older products after they reach end of support on October 14,…

One of the most interesting and important things coming in Windows 11 25H2 is the way Microsoft is rethinking how security tools interact with the operating system—especially antivirus and Endpoint Detection and Response (EDR) software. The current problem: Security tools get deep Windows kernel access Right now, most security tools—think CrowdStrike, Bitdefender, and others—need to…

Microsoft has announced that the hotpatching feature is now available for Windows 11 version 24H2 ARM64 devices. This feature allows security updates to be applied to a system without requiring a reboot. Microsoft introduced hotpatching support for x64 devices with Intel and AMD in April 2025. It works by directly updating the code in a…

Microsoft Entra Identity Secure Score provides an easy-to-view dashboard of your organization’s identity security posture within Microsoft Entra ID (formerly Azure Active Directory). This blog post explains how your score is calculated, what recommendations it includes, and how organizations can use it to prioritize and implement security best practices. What is the Microsoft Entra Identity…

Imagine having the power of Microsoft 365’s cloud services right within your own datacenter, offering you unparalleled control and security. That’s what Microsoft is promising with Microsoft 365 Local. Microsoft 365 Local is a validated reference architecture for running a private instance of Microsoft 365 on Azure Local (Azure Stack HCI). It provides Microsoft 365…

Microsoft is giving IT admins more control than ever with new Role-based access control (RBAC) enhancements in Windows Autopatch, designed to simplify update management across distributed teams. These new capabilities are set to become generally available for commercial customers later this month. Windows Autopatch is a cloud-based service that automates the processing of keeping Windows…

Microsoft will begin rolling out the new Message Trace experience for Exchange Online later this month, with full availability expected by July. The update brings improvements IT admins will appreciate, including better filtering, timezone-aware timestamps, and more detailed delivery statuses. In Exchange Online, Message Trace is a tool that allows administrators to track the journey…

As cyber threats become increasingly sophisticated and IT environments become more complex, security teams face mounting pressure to stay one step ahead. In response, the Cybersecurity and Infrastructure Security Agency (CISA) and the Australian Cyber Security Centre have released new guidance to help organizations effectively deploy SIEM and SOAR platforms, critical tools for centralizing data,…

Microsoft has announced a slew of updates to support local AI development on Windows, including the launch of Windows AI Foundry. This new platform, built on the Windows Copilot Runtime, provides developers with a seamless, unified environment to create, customize, and deploy AI solutions on Windows. Microsoft received feedback that many developers want ready-made AI…