Security & Compliance

Microsoft Threat Intelligence describes EvilTokens as a phishing-as-a-service platform that abuses device code authentication and can take over Microsoft 365 accounts without classic password disclosure. The Microsoft Security Blog cites more than 12,000 compromised inboxes across over 10,000 organizations worldwide and gives concrete protection guidance for Microsoft Entra ID, Conditional Access, Defender XDR, and Exchange … Read more

Microsoft updated the Microsoft Defender for Endpoint September 2026 release notes with new Secure Score recommendations for AI-Readiness. This is not an AI strategy document. It is a concrete endpoint baseline: devices should expose less attack surface, start from a trusted state, isolate critical Windows security functions, and limit the reuse of local administrator credentials. … Read more

In its Security Blog post from 17 September 2026, Microsoft connects recent threat examples with Secure Now in Microsoft Security Exposure Management. The central point is that identities, endpoints, cloud resources, applications, and AI systems should not be reviewed in isolation, because Microsoft says attackers move across those surfaces. For organizations with 10 to 250 … Read more

In September 2026, Microsoft further consolidated identity security visibility in Microsoft Defender XDR: the “What’s new” page lists the Identity Security dashboard and “Coverage & Maturity” as generally available. The detailed documentation remains cautious and still refers to gradual rollout. For SMEs, this is still a good moment to review the new view because it … Read more

Microsoft expanded the documentation for Microsoft Defender for Identity in September 2026: sensor v3.x can now be planned not only for domain controllers, but also for identity servers running AD FS, AD CS, and Microsoft Entra Connect. Microsoft describes a preview path for activating the v3.x sensor on domain controllers without first onboarding them to … Read more