Build the Microsoft 365 Outage Runbook You Didn’t Have
A three-day Microsoft 365 authentication outage exposed break-glass gaps everywhere. Build the runbook that keeps admins working when Entra can't answer.
Read article →
Latest
Microsoft 365
EWS Shutdown, Updated: What Microsoft Changed on 4 September and Your Last Three Weeks Before October
EWS disablement October 2026 got a rewritten parity-gap roadmap and a second usage tool on 4 September — the exact diff and a dated three-week plan.
LiteLLM, RAGFlow, Kestra: Your AI Gateway Is a Control-Plane Target
AI gateway security after Microsoft's August findings: find exposed LiteLLM, RAGFlow and Kestra hosts in Azure, isolate them, rotate keys, detect abuse.
Read article →
Emergency Patches Outside Microsoft: Adobe Commerce StyleSmuggler, N-able N-central, and PEEP
Critical patches for Adobe Commerce StyleSmuggler, N-able N-central Hotfix 4, and PEEP Chromium backdoor. Verify exposure and patch order.
Read article →
Retirement Debt Comes Due: Azure VPN Client for Linux, AVD Classic, Graph Toolkit and Project Online
Four Microsoft services retire in August-September 2026. Find which affects your infrastructure, how to detect them, and your migration timeline.
Read article →
Teams Helpdesk Impersonation: When the Attack Rides a Trusted Workflow
Teams helpdesk impersonation turns one approved remote session into domain access. The kill chain, KQL hunting queries, and the settings that stop it.
Read article →
September 2026 Patch Tuesday: 966 Fixes, Two Zero-Days to Triage First
September 2026 patch tuesday shipped 966 fixes and two exploited zero-days — the triage order, expedite paths, and KQL to run while you deploy.
Read article →
EWS Retirement: Your Exchange Online Graph Migration Plan
EWS is disabled by default on 1 October 2026 and permanently retired on 1 April 2027. Find your callers, set the allowlist, and plan the Graph move.
Read article →
Entra ID Passkeys in 2026: What Changed and Why to Move Now
Synced passkeys are GA, passkey profiles are live, and passkeys become Entra ID's default sign-in on 1 September 2026. What changed and how to move.
Read article →
Microsoft Is Retiring SMS and Voice MFA: Your Entra ID Migration Plan
Microsoft-provided SMS and voice MFA retires 1 February 2027. Here is the Entra ID timeline, the September 1 passkey opt-out, and a safe migration plan.
Read article →