Sebastian 
Microsoft Security Research reports active cloud-based intrusions in which passkey, MFA, or SSO themes are used as social-engineering pretexts. The point is not that passkeys are weak. Microsoft describes how a convincing passkey message can lead users into adversary-in-the-middle phishing or device-code authentication, after which compromised identities are used across Microsoft Graph, SharePoint, OneDrive, and … Read more
Microsoft has released the September 2026 Security Updates and marked two Windows vulnerabilities in MSRC as already exploited. For small and midsized businesses, this is more than a routine patch notice: both issues are local elevation-of-privilege vulnerabilities, both can allow SYSTEM privileges if exploited successfully, and Microsoft marks both with “Customer Action Required: Yes”. What … Read more
In August 2026, Microsoft extended Microsoft Purview Data Loss Prevention to non-Microsoft connected apps. Microsoft Learn says DLP policies can now detect, monitor, and protect sensitive data at rest in connected SaaS applications such as Box, Dropbox, Google Workspace, and Salesforce. For organizations that use cloud storage beyond Microsoft 365, this is a practical reason … Read more
Microsoft updated the “What’s new” page for Microsoft Defender for Endpoint in early September 2026 with two preview notes that matter especially to smaller IT teams running Linux servers or developer endpoints with WSL. Microsoft now lists Memory Scan for Linux and plug-in support for WSL containers. Neither item calls for a rushed rollout, but … Read more
Microsoft is expanding the built-in Security Administrator role in Microsoft Entra. In the September edition of the Entra blog, Microsoft announced additional response actions for non-privileged users: disabling and enabling accounts, revoking active sessions, and forcing password resets. The rollout is expected to be completed by the end of September 2026. For smaller IT teams, … Read more
Briefly describe your current situation. We will get back to you personally as soon as possible.
Initial response within one business day, Monday to Friday.
