Embracing Modern Security: Why and How to Migrate Legacy MFA and SSPR to Authentication Methods Policy in Microsoft Entra ID

Microsoft 365, MVP, Security

As of now, Microsoft is retiring its legacy Multi-Factor Authentication (MFA) and Self-Service Password Reset (SSPR) policies. Starting September 30, 2025, these older policies will no longer be configurable, prompting enterprises and IT admins to transition to the unified and far more flexible Authentication Methods Policy within Microsoft Entra ID. Why migrate? Migration Options: Automated…

Think Before You Click(Fix): How Attackers Trick Us with the “ClickFix” Technique

Copilot for Security, Microsoft 365, MVP, Security

The internet can feel like a minefield—just one misstep, one careless click, and suddenly you’re handing over access to malware, stolen data, or worse. One of the more clever and dangerous tricks making the rounds lately is called ClickFix. It’s a social engineering method that looks innocuous, but packs a nasty punch.   What is…

Take a look at this Microsoft Purview Ninja Training!

Microsoft 365, MVP, Security

The “Secure sensitive data with Microsoft Purview Ninja training scenarios” learning path offers intermediate-level guidance designed for administrators working with Microsoft Purview and Microsoft 365. It consolidates information protection fundamentals and advanced data loss prevention strategies through five practical, real-world scenarios. Participants explore how to classify sensitive information, apply protection with sensitivity labels, enforce DLP policies…

Microsoft Zero Trust Workshop: What It Is and How It Works

Copilot for Security, Microsoft 365, MVP, Security

Microsoft Zero Trust Workshop: What It Is and How It Works In today’s cybersecurity landscape—marked by increasing complexity, hybrid environments, and sophisticated threats—organizations need a clear, actionable framework for robust security. Enter the Microsoft Zero Trust Workshop, a self-service, technically guided toolkit designed to help customers and partners adopt and operationalize Zero Trust principles across…

Deep Dive into Live Response in Microsoft Defender XDR

Microsoft 365, MVP, Security

Microsoft Defender XDR has evolved into a powerful, unified platform for detecting, investigating, and responding to modern cyber threats. One of the most critical capabilities it provides to security analysts is Live Response. This feature empowers defenders to establish a secure, interactive session with endpoints or servers under investigation, enabling immediate collection of forensic data…

Advanced Guide: Adding a Custom Domain to Microsoft 365 Using Only Microsoft Graph PowerShell (mg) Cmdlets

Microsoft 365, MVP, Security

Comprehensive Technical Procedures for Automation and Scripting Modern enterprise environments demand automation and repeatability in administrative tasks. Integrating a custom domain into Microsoft 365 via PowerShell is a crucial operation for identity management, branding, and hybrid infrastructure scenarios. With the deprecation of the legacy *MSOnline* and *AzureAD* modules, leveraging only the Microsoft Graph (*mg*) cmdlets…