agniveshIf you're running Microsoft Entra Connect, consider upgrading to v2.6.79.0 soon, it patches undisclosed security vulnerabilities.
rhodzyNew blog post: Vouching for Vapour: Ben Franklin's M365 Trust Lessons
Benjamin Franklin’s peculiar letter of recommendation for someone he didn't know offers a surprisingly relevant lesson on managing trust and access in our complex M365 environments.
https://rhodzy.com/blog/vouching-for-vapour-ben-franklins-m365-trust-lessons
IAMDevBoxDiscover the complete guide to migrating from on-premise to Microsoft Entra ID. Learn best practices and strategies.
Zeitgeisty AphorismsEbola makes philosophers, outbreak makes heroes, #AzureAD makes sages.
OffSequence⚠️ CRITICAL: CVE-2026-33843 in Microsoft Entra (Azure AD B2C) enables remote authentication bypass & privilege escalation. Patch released by Microsoft — confirm your cloud environment is updated. Details: https://radar.offseq.com/threat/cve-2026-33843-cwe-288-authentication-bypass-using-57b6f0a6 #OffSeq #AzureAD #Security #CVE202633843
🚨 CRITICAL: CVE-2026-33843 in Microsoft Entra (Azure AD B2C) allows remote auth bypass (CVSS 9.1). Patch released — Microsoft manages remediation. No known exploits. Check advisory & verify your cloud config. https://radar.offseq.com/threat/cve-2026-33843-cwe-288-authentication-bypass-using-57b6f0a6 #OffSeq #AzureAD #CloudSecurity #CVE202633843
laztnameObserved phishing campaign leveraging Gmail accounts to deliver emails containing only the password for a supposed “secure” PDF attachment.
Victim flow:
1. Email contains only the password for the attachment
2. Email also includes a PDF attachment
PDF contains a link redirecting to a fake secure document portal
3. User is prompted with Microsoft device login / OAuth-style authentication
4. Credential theft and session hijacking likely follow
Associated IOC domains:
* omegabearings[.]com
* vaisooru[.]com
* roufoka[.]com
Recommend:
• Block domains at DNS/proxy layers
• Hunt for related OAuth/device code login events
• Review Entra ID sign-in logs
• Reset sessions/tokens for impacted users
• Monitor for suspicious consent grants
#Phishing #CredentialPhishing #Microsoft365 #EntraID #AzureAD #OAuth #DeviceCodePhishing #ThreatIntel #IOC #BlueTeam #DFIR #SOC #CyberSecurity #ThreatHunting #Infosec #EmailSecurity #CTI #IncidentResponse
What's New in Office 365What's New in Office 365, Tuesday, May 12, 2026
8 new posts across 7 Microsoft websites since Friday, May 08, 2026
#Microsoft365 #Office365 #MicrosoftTeams #AzureAD
• Microsoft 365 Developer Blog (1)
• Intune Customer Success (1)
• Microsoft 365 Blog - Tech Community (1)
..and more: https://o365.cannell.org/2026/05/12/whats-new-in-O365.html
What’s New in Office 365 - Tuesday, May 12, 2026
8 new posts across 7 Microsoft websites since Friday, May 08, 2026<ul><li>Microsoft 365 Blog - Tech Community (1)</li><li>Exchange Team Blog (2)</li><li>Microsoft 365 Insider Blog (1)</li><li>Microsoft 365 Developer Blog (1)</li><li>Ask the Directory Services Team (1)</li><li>Intune Customer Success (1)</li><li>Microsoft Security Blog (1)</li></ul>
What's New in Office 365, Friday, May 01, 2026
35 new posts across 18 Microsoft websites since Tuesday, April 28, 2026
#Microsoft365 #Office365 #MicrosoftTeams #Microsoft365Copilot #MicrosoftAzure #SharePoint #AzureAD
• Microsoft Defender for Office 365 (1)
• Microsoft Copilot Studio Blog (1)
• Microsoft Power Platform Blog (1)
..and more: https://o365.cannell.org/2026/05/01/whats-new-in-O365.html
What’s New in Office 365 - Friday, May 01, 2026
35 new posts across 18 Microsoft websites since Tuesday, April 28, 2026<ul><li>Copilot for Microsoft 365 (3)</li><li>Microsoft Copilot Studio Blog (1)</li><li>Microsoft 365 Blog - Tech Community (1)</li><li>Teams Blog (2)</li><li>SharePoint Blog (3)</li><li>Microsoft 365 Insider Blog (2)</li><li>Microsoft Azure Blog (2)</li><li>Microsoft 365 Developer Blog (2)</li><li>Ask the Directory Services Team (1)</li><li>Microsoft Intune Blog (1)</li><li>Intune Customer Success (1)</li><li>Microsoft Security Blog (4)</li><li>Microsoft Defender for Office 365 (1)</li><li>Microsoft 365 Defender Blog (1)</li><li>Microsoft Power Platform Blog (1)</li><li>Public Sector Blog (1)</li><li>Education Blog (2)</li><li>Azure AI Foundry Blog (6)</li></ul>
What's New in Office 365, Tuesday, April 28, 2026
12 new posts across 11 Microsoft websites since Friday, April 24, 2026
#Microsoft365 #Office365 #MicrosoftTeams #MicrosoftAzure #Microsoft365Copilot #AzureAD
• Access Blog (1)
• Ask the Directory Services Team (1)
• Teams Blog (1)
..and more: https://o365.cannell.org/2026/04/28/whats-new-in-O365.html
What’s New in Office 365 - Tuesday, April 28, 2026
12 new posts across 11 Microsoft websites since Friday, April 24, 2026<ul><li>Copilot for Microsoft 365 (1)</li><li>Microsoft 365 Blog (1)</li><li>Teams Blog (1)</li><li>Exchange Team Blog (1)</li><li>Outlook Blog (1)</li><li>Microsoft 365 Insider Blog (1)</li><li>Microsoft Azure Blog (1)</li><li>Ask the Directory Services Team (1)</li><li>Intune Customer Success (1)</li><li>Access Blog (1)</li><li>Azure AI Foundry Blog (2)</li></ul>