Sebastian

Conditional Access: custom controls are being retired

by
Conditional Access - custom controls retire in May 2027

Microsoft is retiring custom controls in Conditional Access and replacing them with external MFA. From September 2026, no new custom controls can be created and existing ones can no longer be edited; in May 2027 the feature is switched off entirely. This affects every company that has plugged a third-party provider such as Duo, RSA … Read more

Passkeys become the default in Entra ID as SMS MFA ends

by
Passkeys become the default in Microsoft Entra ID

Microsoft is making passkeys the default sign-in experience in Microsoft Entra ID and ending its own delivery of one-time codes by SMS and voice call. From 1 September 2026, users currently enabled for SMS or voice will be automatically enabled for passkeys and prompted to register one at their next sign-in with MFA. From 1 … Read more

Defender XDR isolates devices automatically in 128 seconds

by
Defender XDR – Automatic device isolation in 128 seconds

Microsoft is extending automatic attack disruption in Defender XDR with a new response action. When the system identifies a compromised workstation as an active attack foothold with high confidence, it can isolate the device from the network automatically. In an incident documented by Microsoft at QNET, only 128 seconds passed between the first detection and … Read more

Project Perception: Microsoft rethinks security for the AI era

by
Perception - Security rethought for the AI era

With Project Perception, Microsoft has introduced a new agentic security system built specifically for the AI era. The underlying idea: when attacks run at machine speed, a defence designed around human reaction times is no longer enough. The public preview starts on 3 August 2026. What is Project Perception? Project Perception brings signals, context, AI … Read more