Microsoft's NEW Conditional Access Policy Plans Explained
Microsoft just introduced Conditional Access Policy Plans, a new feature in Microsoft Entra, now in preview, that changes how we organize and manage Conditional Access policies.
Entra ID
Microsoft 365 Passkeys Not Working? 6 Common Problems and How to Fix Them
Passkey registration failing in Microsoft 365? Here are six common problems, from missing registration options to Conditional Access loops and lost phones, and how to troubleshoot and fix each one.
Whats New in Microsoft 365 | October 2026 Updates
Microsoft's October 2026 updates across Teams, Outlook, Entra, Copilot and Defender, with rollout timing for each change.
ConnectWise / SkyKick Breach: How to Secure Third-Party Applications in Microsoft 365
The ConnectWise Cloud Backup (formerly SkyKick) incident showed how a compromised vendor app can reach Microsoft 365 tenants without passwords or MFA. Here are 4 steps to lock down third-party applications.
Microsoft 365 Security Defaults Are Changing — Here’s What’s New
Microsoft is finally addressing one of the biggest limitations of Security Defaults in Microsoft 365: the all-or-nothing configuration. For years, Security Defaults has provided businesses with a free baseline of identity security protections, including MFA and blocking legacy authentication. The problem? There was almost no flexibility. Now Microsoft is introducing individually managed Security Defaults protections, […]
How to find dormant accounts in Microsoft 365
Earlier this year, attackers got into a client environment using the credentials of a former MSP employee. That person had left, but their partner account in the client tenant was still enabled and still privileged. The attackers used it to move through the environment, and it ended in a data breach and ransomware. Dormant accounts […]
Entra is Killing SMS and Voice MFA (What to Do Now)
Microsoft is officially moving customers away from SMS and voice authentication in Microsoft Entra ID. For MSPs, this is more than another Microsoft change notification. It affects how users authenticate, how they recover their accounts, and how you should plan migrations across every customer tenant you manage. Beginning September 1, 2026, Microsoft will start automatically […]
Native Backup for Microsoft Entra is Here
Microsoft quietly dropped Entra Backup and Recovery into Public Preview in March 2026. Before this feature, Entra ID had no native rollback capability for most object types. A deleted security group was gone permanently, no recycle bin, no soft-delete window. A misconfigured Conditional Access policy meant a manual rebuild. A corrupted service principal meant starting […]
How Guest Users Get Created in Your Microsoft 365 Tenant
Guest users are one of the most powerful collaboration features in Microsoft 365. They allow organizations to work with vendors, consultants, customers, and partners without creating full internal accounts. But if you ask most administrators how guest users get created in their tenant, the answer is usually simple. Someone sends an invite. That answer is […]
New Risk Remediation Settings in Conditional Access
Imagine this scenario. Your CFO signs into Microsoft 365 from Denver.Two minutes later, there is another successful login. This time it is from Eastern Europe. No VPN.No approved travel.No reasonable explanation. That is impossible travel and it almost always means the account is compromised. What makes this more concerning is not just the attack itself. […]
Why Your MFA Can Still Be Hacked (How I’d Implement MFA in 2026)
In today’s attack landscape, not all MFA methods should be treated equal. Across Microsoft 365 tenants, one of the fastest-growing attack techniques I’m seeing today is Adversary-in-the-Middle (AiTM) phishing — often paired with token theft. In this post, I’ll walk through: How an AiTM attack actually works Why traditional MFA fails in these scenarios And […]
5 Microsoft Entra Security Features You Might Not Know About
Microsoft Entra has a wealth of security features that often fly under the radar—yet they can make a significant difference in protecting your environment. The best part? Many of these settings are already included in base licenses like Microsoft 365 Business Premium. Let’s walk through five lesser-known Entra settings that you can enable today to […]