Microsoft News

Microsoft updated the Defender for Office 365 documentation on September 21, 2026: users can now report completed or missed group calls in Microsoft Teams from call history as scam or not scam. Until now, the visible reporting workflow focused mainly on messages and one-to-one calls. For organizations with 10 to 250 users, the change matters … Read more

Microsoft lists Microsoft Purview Network Data Security as generally available in September 2026 for the integration with Microsoft Entra Global Secure Access. This means organizations can inspect sensitive data not only in Exchange, SharePoint, OneDrive, or Teams, but also in network traffic to unmanaged cloud and AI applications such as ChatGPT, Gemini, Claude, Dropbox, Box, … Read more

Microsoft has published a new threat matrix for cloud web applications. It maps attack techniques against web apps and serverless platforms to MITRE ATT&CK tactics and shows where defenders should connect visibility, hardening, and response. For smaller organizations, this matters now because many business applications run in Azure App Service, Functions, SaaS integrations, or similar … Read more

Microsoft updated its documentation in September on how Microsoft Defender can monitor AI agents during runtime and block risky actions before they execute. For organizations testing agents in Copilot Studio, Agent 365, or on Windows endpoints, this is more than another portal setting. Agents can access data, call tools, and run commands. Teams should decide … Read more

Microsoft describes an observed campaign using AI-assisted executive impersonation and fraudulent invoices. The attackers posed as internal leaders and as a known vendor, used convincing invoice content, and targeted finance teams. For small and midsize businesses, this matters now because these messages do not look like classic malware. They look like internal approval, a supplier … Read more