Below are all of the latest feature updates coming to Microsoft 365 and highlights from Microsoft ignite. Automated Security Assessments mapped to the CIS Controls CloudCapsule is a tool I’ve been working on over the past year that automates your M365 security assessments against the CIS Controls. I started CloudCapsule because I saw the need to streamline the […]
Cyber Essentials is supposed to make your business safer but for many organizations, it ends up feeling expensive, overwhelming, and confusing. You start Googling Cyber Essentials tools and Cyber Essentials requirements, and suddenly you’re facing: A stack of quotes from new vendors Tools you’ve never heard of Technical controls that feel impossible to map The […]
Imagine this scenario. Your CFO signs into Microsoft 365 from Denver.Two minutes later, there is another successful login. This time it is from Eastern Europe. No VPN.No approved travel.No reasonable explanation. That is impossible travel and it almost always means the account is compromised. What makes this more concerning is not just the attack itself. […]
NCE renewals are coming fast. Many small and mid-sized businesses are still running on Microsoft 365 Business Standard, and in most cases when their renewal hits, they’re automatically locked into whatever licensing decision they made a year ago. The problem?That decision often no longer reflects: How the business actually works today How employees access data […]
If you’re an MSP, you’ve probably seen it: the business wants frictionless collaboration with vendors, contractors, and partner companies. They’re sharing files in SharePoint, chatting in Teams, moving fast… and the security model quietly drifts into “wide open.” This post walks through a real-world-style scenario (Tech Corp) and the exact Microsoft 365 controls that can […]
Below are all of the latest feature updates coming to Microsoft 365 and highlights from Microsoft ignite. Automated Security Assessments mapped to the CIS Controls CloudCapsule is a tool I’ve been working on over the past year that automates your M365 security assessments against the CIS Controls. I started CloudCapsule because I saw the need to streamline the […]
In today’s attack landscape, not all MFA methods should be treated equal. Across Microsoft 365 tenants, one of the fastest-growing attack techniques I’m seeing today is Adversary-in-the-Middle (AiTM) phishing — often paired with token theft. In this post, I’ll walk through: How an AiTM attack actually works Why traditional MFA fails in these scenarios And […]
TL;DR: Most MSPs still run with standing access to customer tenants through GDAP. That’s convenient but dangerous. Switching to Privileged Identity Management (PIM) for Groups in Entra ID gives your techs just-in-time (JIT), time-bound access with MFA, approval, and auditing. This post shows you the “why,” the architecture, and the exact steps to deploy it […]
Below are all of the latest feature updates coming to Microsoft 365 and highlights from Microsoft ignite. Automated Security Assessments mapped to the CIS Controls CloudCapsule is a tool I’ve been working on over the past year that automates your M365 security assessments against the CIS Controls. I started CloudCapsule because I saw the need to streamline the […]
Microsoft just dropped a brand-new Copilot SKU specifically for small and medium businesses. Lower cost, same Copilot capabilities. Let me break down what’s new, what it includes, how to activate it, and the FAQs everyone’s already asking. What Is Copilot for Business? Copilot for Business is a new sku specifically for SMB (less than 300 […]
Windows Autopilot has been around for years, and many admins have built entire deployment processes around what we now call “Autopilot V1.” But recently, there’s been a ton of buzz around Autopilot Device Preparation—also known as Autopilot V2. On the surface, V1 and V2 look nearly identical: A new device is purchased, Windows boots into […]
You know that feeling when you open your inbox in the morning and it’s just… chaos?Meeting invites. Follow-ups. “Quick questions.” And before you even start working, half your day’s already gone. Now, imagine if you had an executive assistant sitting beside you, not a human one, but an AI one, that reviewed your schedule, prioritized […]
