Resources/Blog

Insights from our security experts

Practical guidance on AI security, identity, data protection, and security operations, plus news from Synergy Advisors.

Latest

Featured articles

Browse by topic

All articles

AI agents from AWS, Google Cloud, and open-source frameworks governed in one Agent 365 control plane across discovery, identity, security protection, data protection, and telemetry
  • AI Security

Agent 365 Beyond Microsoft: Governing AWS, Google Cloud, and Open-Source AI Agents in One Control Plane

Agent 365 can now see agents on AWS and Google Cloud. Our experts extend it so they also get identity, DLP, threat
Read article
Project Perception: red, blue and green AI agent teams in the agentic SOC, with human approval before significant actions
  • Security Operations

Project Perception: What Changes When Security AI Stops Assisting and Starts Acting

Microsoft's Project Perception puts red, blue and green AI agents to work in the SOC. What changes, what to prepare and the
Read article
A fake IT help desk attack in Microsoft Teams: an inbox flood, an external "IT" chat and a call asking for Quick Assist, stopped by closing external access
  • Security Operations

The Help Desk Is the New Perimeter: Stopping Fake IT Support Attacks in Microsoft Teams

Attackers pose as the IT help desk in Microsoft Teams chats and calls, then deploy ransomware. How the attack works, why it
Read article
Copilot oversharing in the Microsoft 365 admin center: fix "Everyone except external users" sites and "Anyone" links first, contain sensitive sites and protect prompts with labels and DLP
  • Data Protection

Copilot Oversharing Is Moving Into the Microsoft 365 Admin Center: What to Fix First

Copilot oversharing controls are coming to the Microsoft 365 admin center. Why oversharing matters more with Copilot, what to fix first, and
Read article
A stolen Microsoft 365 session token reused by an attacker: revoke sessions, delete rogue devices, remove unknown MFA methods and close the door with token protection and passkeys
  • Identity & Access

Resetting the Password Isn’t Enough: How to Evict an Attacker After Microsoft 365 Token Theft

Attackers got into Microsoft 365 accounts at 79 organizations without a password. Why a password reset is not an eviction, and the
Read article
Your own telephony provider in Microsoft Entra: how to decide, with the key dates October 30, 2026, February 1, 2027 and July 1, 2027, and passkeys as the default answer
  • Identity & Access

Choose Your Own Telephony Provider in Microsoft Entra: What Changes on October 30 and How to Decide

From October 30, Microsoft Entra ID lets you keep SMS and voice MFA after February 1, 2027 with your own telephony provider.
Read article
What is an AI agent? From assistants to agents, explained: an agent starts with a goal, plans and acts, works for hours and needs an owner
  • AI Security

What Is an AI Agent? From Assistants to Agents, Explained

What an AI agent is, how it differs from an AI assistant, what it is made of, where you already meet agents
Read article
Macro delegate, micro steer: AI agent governance for leaders, in four steps: see, contain, steer and operate
  • AI Security

“Macro Delegate, Micro Steer”: What Satya Nadella’s Agent Vision Means for Security Leaders

Satya Nadella says agents let us "macro delegate and micro steer." What that vision means for security leaders: three shifts, six governance
Read article
AI-driven attacks are here: what Storm-0940 means, with the three doors attackers used: weak authentication, apps and service principals, and privileged roles
  • Security Operations

AI-Driven Attacks Are Here: What the Storm-0940 Campaign Means for Your Microsoft 365 Tenant

Microsoft says Storm-0940 used ARTEX, a framework of AI agents, to attack more than 2,250 Microsoft 365 tenants. What happened, why AI-driven
Read article
Newsletter

Get our insights in your inbox

New articles, webinars, and events on Microsoft security and AI, once a month.

Subscribe
Talk to our experts
Contact us
Scroll to Top