We wanted to tell you how to address the Exchange Server May 2026 vulnerability CVE-2026-42897.  

KQL hunting queries for the new AADGraphActivityLogs table to detect Entra ID reconnaissance tooling based on UserAgent, RequestUri, and volume.

Microsoft Entra passkeys on Windows enable phishing-resistant, passwordless sign-in using Windows Hello on Entra-protected resources, including unmanaged devices. Public preview starts mid-March 2026....

Yellowhat is a cutting-edge cybersecurity event dedicated to Microsoft Security Technology, offering advanced deep-dive sessions (level 400+) for seasoned professionals. It brings together experts and...

Learn how to exclude specific analytics rules from the correlation engine to maintain static incident grouping behavior similar to Microsoft Sentinel.

YouTube video by TROOPERS IT Security Conference

While preparing for my Black Hat and DEF CON talks in July of this year, I found the most impactful Entra ID vulnerability that I will probably ever find. One that could have allowed me to compromise ...

View more about this event at Workplace Ninja Summit 2025

Co-author - Ashwin Patil Security teams today face an overwhelming challenge: every data point is now a potential security signal and SOCs are drowning in...

For a long time now, defenders had the ability to monitor behavior of human- and workload identities in Entra tenants not only through AuditLogs but with high level of insight with the MicrosoftGraphA...

Learn how to secure your environment with token protection in Microsoft Entra Conditional Access policies.

Customer guidance for SharePoint vulnerability CVE-2025-53770

Summary of new auditing features and deployment details

Migrate your applications using Azure AD Graph APIs scripts to Microsoft Graph before September 2025.

Make Microsoft Edge your own with extensions that help you personalize the browser and be more productive.

See what features are generally available (GA) in the latest release of Microsoft Defender for Endpoint, and security features in Windows 10 and Windows Server.

Staying ahead of attackers is tough, as they constantly evolve and use advanced techniques like AI to exploit vulnerabilities. Protecting high-value assets...

YouTube video by WorkPlace Ninja Summit

Learn about the mitigation steps tenant administrators should perform for service principal-less authentication behavior deprecation.