Microsoft 365 Security
Blog
Practical articles on Entra ID, Intune, Conditional Access, and device security.
-
Entra Agent ID explained: who gets to create AI agents?
Entra Agent ID gives AI agents their own identity. What blueprints and agent identities are, why the setting 'Users can create agent blueprints' matters, and when to leave it on or switch it off.
-
AiTM Phishing Exposed (2/2): Stop session hijacking
Stop AiTM session hijacking with FIDO2, CAE, and token protection. Microsoft 365 configuration guide with 2 Sentinel queries and 7-step incident response.
-
Unmanaged devices with Microsoft Intune (3/3): iOS
iOS MAM covers the full M365 app suite but requires Microsoft Authenticator as broker. 3 BYOD paths, the CA gap most organizations miss, and what goes wrong.
-
AiTM Phishing Exposed (1/2): How session hijacking works
AiTM phishing doesn't bypass MFA. It waits for MFA to succeed, then takes what comes next. This is how the attack works and why standard MFA provides no protection against it.
-
Unmanaged devices with Microsoft Intune (2/3): Android
Android MAM protects all Microsoft 365 apps on mobile, not just Edge. 3 BYOD paths, different control levels, and the CA gap most organizations miss.
-
Shadow AI Exposed (2/2): Building a governance program that actually works
Technical controls catch the visible surface. This part covers what a shadow AI governance program looks like in practice: approved AI catalog, the personal account problem, and a maintenance cycle that doesn't erode.
-
Unmanaged devices with Microsoft Intune (1/3): Windows
Windows BYOD with Intune has three distinct paths. Most organizations configure the wrong one. MAM, MDM enrollment, Conditional Access, and the enrollment pitfalls clients hit in practice.
-
Social Engineering Exposed (3/3): Defence that works
MFA alone won't stop a helpdesk attack. Here's what actually does: the process changes, Entra ID settings, and monitoring that holds up under pressure.
-
Shadow AI Exposed (1/2): What organizations don't know about the AI tools their employees use
Most shadow AI incidents start with a legitimate task. What actually ends up in those tools, why security controls miss it, and what the NSW government breach tells us.
-
How to configure Intune compliance policies: step-by-step guide for all platforms
Configure Microsoft Intune compliance policies for Windows, macOS, iOS, and Android. Includes recommended settings per platform, Conditional Access wiring, report-only testing, and monitoring.