Migrate Graph security alerts API by 15 October

Microsoft Graph security alerts API – migration by 15 October

Microsoft will retire the legacy Microsoft Graph security alerts API on 15 October 2026. The affected endpoint is /security/alerts, which applications have used to retrieve, monitor, or update security alerts. Microsoft tells customers to move to the new alerts and incidents API in Microsoft 365 Defender through /security/alerts_v2 and, depending on the workflow, /security/incidents. This … Read more

Review Microsoft Baseline Security Mode now

Microsoft Baseline Security Mode – harden Microsoft 365 safely

Microsoft is putting Baseline Security Mode more prominently into the Microsoft 365 security conversation. In its Security Blog article from 6 October 2026, Microsoft recommends not only patching faster, but also building baseline controls so that an unpatched flaw has less room to cause damage. The Microsoft Learn documentation updated on 30 September 2026 describes … Read more

External IdP passkeys in Microsoft apps

External IdP passkeys for Microsoft apps

Microsoft has made browser authentication for external identity providers in Microsoft Entra ID generally available. Organizations that federate Microsoft 365 through WS-Fed or SAML 2.0 can now use passkeys, FIDO2 security keys, and eligible browser sessions for supported Microsoft app sign-ins. For small and midsize businesses, this matters most when Outlook, Teams, or OneDrive previously … Read more

Microsoft Purview: review the Classifiers preview

Microsoft Purview Classifiers preview review

Microsoft has documented the new Classifiers experience in Microsoft Purview as a public preview. Supported classification types no longer have to be inspected across several separate administration areas; administrators can discover, create, inspect and manage classifiers in one place. For smaller organisations this matters because classification is the foundation for labels, data loss prevention and … Read more

NeedyMantis: Review Defender hunting now

Review NeedyMantis hunting with Microsoft Defender

Microsoft Threat Intelligence describes NeedyMantis as a modular malware family observed in a limited number of targeted intrusions after an environment was already compromised. The Microsoft Security Blog from 28 September 2026 names telecommunications organizations, universities, medical nonprofits, intergovernmental organizations, and government contractors as affected sectors. For small and midsized organizations, the topic matters when … Read more