Defender: Review real-time protection for AI agents

Defender real-time protection for AI agents

Microsoft updated its documentation in September on how Microsoft Defender can monitor AI agents during runtime and block risky actions before they execute. For organizations testing agents in Copilot Studio, Agent 365, or on Windows endpoints, this is more than another portal setting. Agents can access data, call tools, and run commands. Teams should decide … Read more

Review AI-assisted invoice fraud with Defender

Warning symbol for AI-assisted invoice fraud

Microsoft describes an observed campaign using AI-assisted executive impersonation and fraudulent invoices. The attackers posed as internal leaders and as a known vendor, used convincing invoice content, and targeted finance teams. For small and midsize businesses, this matters now because these messages do not look like classic malware. They look like internal approval, a supplier … Read more

Microsoft Purview: Review DLP for Box, Dropbox and Salesforce

Microsoft Purview – Review DLP for non-Microsoft apps

In August 2026, Microsoft extended Microsoft Purview Data Loss Prevention to non-Microsoft connected apps. Microsoft Learn says DLP policies can now detect, monitor, and protect sensitive data at rest in connected SaaS applications such as Box, Dropbox, Google Workspace, and Salesforce. For organizations that use cloud storage beyond Microsoft 365, this is a practical reason … Read more

Defender: Review Linux Memory Scan and WSLc

Microsoft Defender – Review Linux Memory Scan and WSLc

Microsoft updated the “What’s new” page for Microsoft Defender for Endpoint in early September 2026 with two preview notes that matter especially to smaller IT teams running Linux servers or developer endpoints with WSL. Microsoft now lists Memory Scan for Linux and plug-in support for WSL containers. Neither item calls for a rushed rollout, but … Read more

Entra Security Administrator: Review role by end of September

Microsoft Entra Security Administrator - role review September 2026

Microsoft is expanding the built-in Security Administrator role in Microsoft Entra. In the September edition of the Entra blog, Microsoft announced additional response actions for non-privileged users: disabling and enabling accounts, revoking active sessions, and forcing password resets. The rollout is expected to be completed by the end of September 2026. For smaller IT teams, … Read more