If you’re an MSP, you’ve probably seen it: the business wants frictionless collaboration with vendors, contractors, and partner companies. They’re sharing files in SharePoint, chatting in Teams, moving fast… and the security model quietly drifts into “wide open.” This post walks through a real-world-style scenario (Tech Corp) and the exact Microsoft 365 controls that can […]
Below are all of the latest feature updates coming to Microsoft 365 and highlights from Microsoft ignite. Automated Security Assessments mapped to the CIS Controls CloudCapsule is a tool I’ve been working on over the past year that automates your M365 security assessments against the CIS Controls. I started CloudCapsule because I saw the need to streamline the […]
In today’s attack landscape, not all MFA methods should be treated equal. Across Microsoft 365 tenants, one of the fastest-growing attack techniques I’m seeing today is Adversary-in-the-Middle (AiTM) phishing — often paired with token theft. In this post, I’ll walk through: How an AiTM attack actually works Why traditional MFA fails in these scenarios And […]
TL;DR: Most MSPs still run with standing access to customer tenants through GDAP. That’s convenient but dangerous. Switching to Privileged Identity Management (PIM) for Groups in Entra ID gives your techs just-in-time (JIT), time-bound access with MFA, approval, and auditing. This post shows you the “why,” the architecture, and the exact steps to deploy it […]
Below are all of the latest feature updates coming to Microsoft 365 and highlights from Microsoft ignite. Automated Security Assessments mapped to the CIS Controls CloudCapsule is a tool I’ve been working on over the past year that automates your M365 security assessments against the CIS Controls. I started CloudCapsule because I saw the need to streamline the […]
Microsoft just dropped a brand-new Copilot SKU specifically for small and medium businesses. Lower cost, same Copilot capabilities. Let me break down what’s new, what it includes, how to activate it, and the FAQs everyone’s already asking. What Is Copilot for Business? Copilot for Business is a new sku specifically for SMB (less than 300 […]
Windows Autopilot has been around for years, and many admins have built entire deployment processes around what we now call “Autopilot V1.” But recently, there’s been a ton of buzz around Autopilot Device Preparation—also known as Autopilot V2. On the surface, V1 and V2 look nearly identical: A new device is purchased, Windows boots into […]
You know that feeling when you open your inbox in the morning and it’s just… chaos?Meeting invites. Follow-ups. “Quick questions.” And before you even start working, half your day’s already gone. Now, imagine if you had an executive assistant sitting beside you, not a human one, but an AI one, that reviewed your schedule, prioritized […]
Below are all of the latest feature updates coming to Microsoft 365 Automated Security Assessments mapped to the CIS Controls CloudCapsule is a tool I’ve been working on over the past year that automates your M365 security assessments against the CIS Controls. I started CloudCapsule because I saw the need to streamline the assessments of Microsoft 365 tenants […]
Privileged accounts are the #1 target for attackers. One compromised Global Administrator can mean full control of mail, SharePoint, Teams, Defender…everything. The fallout is real: downtime, legal exposure, regulatory headaches, and direct financial loss. A pattern I see often: IT teams feel safe because they’ve rolled out MFA and Conditional Access for users… while the […]
IT admins still fall into two common traps when managing local administrator accounts across user workstations: Using the same password across all endpoints. Allowing end users to be local administrators on their devices. While this can make things easier operationally it creates a massive attack surface. Those same users can install malware, fall victim to […]
2025 has been a rough year for VPNs. We’ve seen breaches at major vendors, clunky user experiences, and a constant flood of helpdesk tickets from frustrated users. Yet, many businesses still rely on VPNs because their legacy line-of-business applications and on-prem file shares haven’t made the move to the cloud. But what if you could […]
