Microsoft is retiring its built-in SMS and voice authentication services on February 1, 2027. Businesses should review their Microsoft 365 authentication settings now to prepare for this change. Employees who use text messages or phone calls to verify Microsoft 365 sign-ins will need another authentication method before the deadline. Microsoft is also making passkeys the default authentication experience for users enabled for SMS or voice. While other MFA methods, including M

A missing company laptop is more than a hardware problem. It may contain company files, cached email, browser sessions, Microsoft 365 access, and other business information. The good news is that if the device is properly managed through Microsoft Intune and Microsoft Entra ID, administrators have several options to protect company data remotely. But the order of actions matters. Here is what a Microsoft 365 administrator should check and do when an employee reports that a co

Microsoft Teams has become part of the normal workday for many businesses. Employees use it to communicate with coworkers, join meetings, collaborate with external partners, and share files and links. That familiarity can also create a security problem. Imagine an employee receives a Teams message that looks routine: “Can you review this document?” There is a link underneath. The employee recognizes the sender's name, is busy, and clicks it. But the link leads to a malicious

Artificial intelligence is becoming part of everyday healthcare operations. Hospitals and healthcare organizations are evaluating AI to help with appointment management, clinical documentation, patient communications, workflow automation, reporting, and administrative tasks. The opportunities are significant. But healthcare organizations also operate in one of the most sensitive environments for data, security, and regulatory compliance. For organizations operating in Europe,

A compromised Microsoft 365 account does not always look compromised. An employee might still be able to sign in normally. Outlook may continue working. There may be no obvious warning that someone else has accessed the mailbox. But behind the scenes, an attacker who gains access to a mailbox can create rules that automatically forward, move, delete, or hide certain emails. Microsoft specifically identifies suspicious inbox rules as a common sign of a compromised Microsoft 36

Not every Microsoft 365 account is equally valuable to an attacker. Some users have access to money. Others have confidential business information or powerful administrative permissions. If one of these accounts is compromised, the impact can be much greater than the compromise of a regular user. Microsoft refers to especially important users as priority accounts and gives examples including CEOs, CFOs, CISOs, and infrastructure administrators. Here are five types of accounts