EWS disablement October 2026 got a rewritten parity-gap roadmap and a second usage tool on 4 September — the exact diff and a dated three-week plan.
Read article →AI gateway security after Microsoft's August findings: find exposed LiteLLM, RAGFlow and Kestra hosts in Azure, isolate them, rotate keys, detect abuse.
Read article →Vendor patches your Microsoft cycle won't show you: N-able N-central CVE-2026-86218, Adobe Commerce StyleSmuggler and the PEEP Chromium backdoor.
Read article →Four Microsoft services retire in August-September 2026. Find which affects your infrastructure, how to detect them, and your migration timeline.
Read article →Teams helpdesk impersonation detection: the kill chain, KQL hunting queries and the settings that stop one approved remote session becoming domain access.
Read article →September 2026 patch tuesday shipped 966 fixes and two exploited zero-days — the triage order, expedite paths, and KQL to run while you deploy.
Read article →Group managed service accounts security rests on two things almost nobody audits: the password retrieval ACL and the forest KDS root key. Fix both.
Read article →EWS retirement in Exchange Online: off by default since 1 October 2026, gone on 1 April 2027. Find your callers, fix the allowlist, move to Graph.
Read article →Plan your Entra ID passkey rollout: synced passkeys are supported, profiles control attestation and AAGUIDs, and passkeys are now the default sign-in.
Read article →Microsoft-provided SMS and voice MFA retires 1 February 2027. Here is the Entra ID timeline, the September 1 passkey opt-out, and a safe migration plan.
Read article →
