Protecting Administrator Mailboxes from Phishing and Other Threats https://ift.tt/A3Xlc8h Separation of Responsibilities is a Good Thing In his article describing why separate Microsoft 365 administrator accounts are critical to security posture, Thijs Lecomte outlines reasons why the accounts used to perform Microsoft 365 administrative operations should not be used for day-to-day activities such as email […]
Creating New Microsoft 365 Accounts with PowerShell https://ift.tt/oFyE0sH Automation is Useful The easiest way to create a new Microsoft 365 account is through the Microsoft 365 admin center. Microsoft has done a lot of work over the last few years to smoothen the GUI and smoothen the process. But it’s good to have an alternative, […]
Azure AD access reviews basics https://ift.tt/Ck1RyHo Azure AD reviews are a capability provided with Azure AD P2 licenses that allow you to automate the discovery and access control of user account in Azure AD groups and roles. This video give you a walk through of the basics of creating and using access reviews to ensure […]
Azure AD Identity Protection basics https://ift.tt/eUGVowQ Azure AD Identity protection is available with Azure AD P2 and provides risk detection and policy enforcement for sign ins and users. It can also be incorporated with Conditional Access policies to provide even more flexibility. This video shows you the basics of Azure AD Identity Protection as well […]
TLS certificate changes to Microsoft 365 services including Microsoft Teams https://ift.tt/LnhrfD5 Microsoft 365 is updating services powering messaging, meetings, telephony, voice, and video to use TLS certificates from a different set of Root Certificate Authorities (CAs). This change is being made because the current Root CA will expire in May 2025. Affected products include: Microsoft […]
Upcoming changes to license re-assignment in Exchange Online https://ift.tt/J3w9bt2 In this post we want to highlight some upcoming changes around license re-assignment in Exchange Online to help admins get clarity on mailbox behavior and how license re-assignment works. The new behavior for re-licensed users will be effective from about end of March 2022, onwards. Current […]
Basic Azure AD User Account Operations with the Microsoft Graph PowerShell SDK https://ift.tt/XgJFn8c Preparing to Migrate Away from Old Azure AD cmdlets I received a lot of reaction when I described Microsoft’s new deprecation schedule for the Azure AD and MSOL modules. In summary, you have until 26 August 2022 to update scripts which perform […]
Over 200,000 MicroTik Routers Worldwide Are Under the Control of Botnet Malware https://ift.tt/7k3apAy Vulnerable routers from MikroTik have been misused to form what cybersecurity researchers have called one of the largest botnet-as-a-service cybercrime operations seen in recent years. According to a new piece of research published by Avast, a cryptocurrency mining campaign leveraging the new-disrupted […]
Corrupted open-source software enters the Russian battlefield https://ift.tt/FwnBsK3 It started as an innocent protest. Npm, JavaScript’s package manager maintainer RIAEvangelist, Brandon Nozaki Miller, wrote and published an open-code npm source-code package called peacenotwar. It did little except add a protest message against Russia’s invasion of Ukraine. But then, it took a darker turn: It began […]
Microsoft Security Compliance Toolkit 1.0 (contains also Windows Policy Analyzer) https://ift.tt/Iqjh9GJ [German]Microsoft has released the Microsoft Security Compliance Toolkit 1.0 in Nov. 2021. This week I was asked if the Windows Policy Analyzer – a utility for analyzing and comparing Group Policy Objects (GPOs) – which has been available since 2016, is now being phased […]
