On 23 September 2026, Microsoft announced the Integrated Security Operations Center (ISOC) in Microsoft Defender as a public preview. For small and midsized Microsoft 365 environments, this is not a reason for licence advice, but it is a concrete operations checkpoint: if Defender signals, incidents, automation, and reporting are handled in separate places today, administrators … Read more
Microsoft Threat Intelligence describes Storm-3168 activity involving compromised service principals in Azure. The Microsoft Security Blog from 25 September 2026 links the activity to JADEPUFFER and reports Azure-focused resource destruction, reconnaissance, and credential collection. For small and midsized organizations, this matters whenever applications, automations, or backups rely on long-lived secrets: according to Microsoft, a disclosed … Read more
Microsoft Threat Intelligence describes Storm-2570 as a ransomware affiliate tracked since April 2025 across several ransomware ecosystems. The Microsoft Security Blog from 24 September 2026 names deployments involving Qilin, DragonForce, Anubis, and BERT, and stresses that the key defensive question is not only which ransomware payload appears at the end. The useful signals are the … Read more
Microsoft Threat Intelligence describes EvilTokens as a phishing-as-a-service platform that abuses device code authentication and can take over Microsoft 365 accounts without classic password disclosure. The Microsoft Security Blog cites more than 12,000 compromised inboxes across over 10,000 organizations worldwide and gives concrete protection guidance for Microsoft Entra ID, Conditional Access, Defender XDR, and Exchange … Read more
Microsoft updated the Defender for Endpoint documentation in September 2026: Microsoft Defender for Endpoint now supports Linux desktops in Public Preview. Until now, many organizations read the Linux guidance mainly through a server lens. For companies with 10 to 250 users, the change matters when developers, administrators, engineering teams, or specialist departments use Linux workstations. … Read more
Briefly describe your current situation. We will get back to you personally as soon as possible.
Initial response within one business day, Monday to Friday.
