The ConnectWise Cloud Backup (formerly SkyKick) incident showed how a compromised vendor app can reach Microsoft 365 tenants without passwords or MFA. Here are 4 steps to lock down third-party applications.
Microsoft is finally addressing one of the biggest limitations of Security Defaults in Microsoft 365: the all-or-nothing configuration. For years, Security Defaults has provided businesses with a free baseline of identity security protections, including MFA and blocking legacy authentication. The problem? There was almost no flexibility. Now Microsoft is introducing individually managed Security Defaults protections, […]
Earlier this year, attackers got into a client environment using the credentials of a former MSP employee. That person had left, but their partner account in the client tenant was still enabled and still privileged. The attackers used it to move through the environment, and it ended in a data breach and ransomware. Dormant accounts […]
Below are all of the latest feature updates coming to Microsoft 365. Automated Security Assessments and Policy Management CloudCapsule is a tool I built purpose built for MSPs looking to scale their security practice on Microsoft 365. Scans of tenants take on average 60 seconds where we collect over 250 data points. We now provide remediation and […]
Below are all of the latest feature updates coming to Microsoft 365. Automated Security Assessments and Policy Management CloudCapsule is a tool I built purpose built for MSPs looking to scale their security practice on Microsoft 365. Scans of tenants take on average 60 seconds where we collect over 250 data points. We now provide remediation and […]
Microsoft is officially moving customers away from SMS and voice authentication in Microsoft Entra ID. For MSPs, this is more than another Microsoft change notification. It affects how users authenticate, how they recover their accounts, and how you should plan migrations across every customer tenant you manage. Beginning September 1, 2026, Microsoft will start automatically […]
Open your SharePoint admin center and look at Active sites. How many of those sites are actually still being used? This is a problem in almost every Microsoft 365 environment. Someone creates a site for a project, the project ends, and the site stays. Repeat that for a few years and you end up with […]
You see a new Microsoft Copilot feature on LinkedIn, open your own tenant to try it, and it is nowhere to be found. You refresh. You check another app. Still nothing. There is a good chance the person showing off that feature is part of Microsoft Frontier. Frontier is Microsoft’s early access program for new […]
Below are all of the latest feature updates coming to Microsoft 365. Automated Security Assessments and Policy Management CloudCapsule is a tool I built purpose built for MSPs looking to scale their security practice on Microsoft 365. Scans of tenants take on average 60 seconds where we collect over 200 data points. We now provide remediation and […]
TLDR: You can set up Claude single sign-on (SSO) with Microsoft Entra ID in about 10 minutes on a paid Claude Team or Enterprise plan. The process has three parts: verify your company domain in Claude, connect Claude to Entra through Claude’s guided setup, and control access by assigning users or groups in Entra. Once […]
As Microsoft Copilot becomes part of everyday work, most conversations focus on productivity. We wanted to explore something different. What happens when a trusted employee decides to misuse it? To answer that question, I partnered with Bob Miller with IRGame to run a live tabletop exercise that simulated a real insider threat. The scenario followed […]
After using Microsoft Copilot Cowork every day for a month, here’s my honest review, favorite workflows, pricing concerns, and whether it’s worth buying. Microsoft Copilot Cowork Is the First Copilot Feature I Actually Want to Use For the last two years, Microsoft Copilot has struggled to keep up with tools like ChatGPT and Claude. The […]
