For people interested in Microsoft technologies
Microsoft is positioning Copilot in Excel as a finance-focused AI tool designed for the emerging era of "Frontier Finance." While the announcement is brief, it signals continued investment in Microsoft 365 Copilot capabilities for Excel, with potential value for finance teams seeking faster analysis, modeling, and decision support inside familiar spreadsheets.
Microsoft Threat Intelligence says Storm-2570 is a cross-ecosystem ransomware affiliate using consistent tools and techniques across Qilin, DragonForce, Anubis, and BERT deployments. The report matters because defenders can improve detection and disruption by tracking recurring tradecraft such as RMM abuse, credential theft, tunneling, and cloud exfiltration instead of focusing only on the final ransomware payload.
Microsoft’s September 2026 security updates focus on governing AI agents, blocking sensitive data from reaching risky AI apps, and improving SOC investigation workflows. The release also expands Microsoft Purview compliance capabilities and brings more Intune endpoint management features to GCC High and DoD environments.
Microsoft has announced the integrated security operations center (ISOC) in Microsoft Defender, now available in preview. ISOC unifies SIEM and threat protection to help security teams and AI agents detect, investigate, and respond faster using a shared security foundation.
Microsoft says the conversation around AI is shifting from hype to the practical systems needed to make AI work across the enterprise. The post signals a focus on the organizational, technical, and operational foundations required to deploy AI at work in Microsoft 365 environments.
Microsoft has detailed how the EvilTokens phishing-as-a-service platform industrialized device code phishing to steal tokens and compromise more than 12,000 inboxes across 10,000 organizations. The report matters for security teams because it includes mitigation guidance, Defender XDR detections, and hunting recommendations to reduce risk from token theft and post-compromise persistence.
Microsoft is promoting upcoming webinars focused on securing multi-tenant environments with Microsoft Entra Tenant Governance, now generally available. The sessions highlight how organizations can detect shadow tenants, apply consistent governance, and build a stronger identity foundation for AI readiness.
Microsoft’s September 2026 Power Platform update adds new Power Apps templates and modern controls, expands model-driven app UI improvements, and brings more AI-assisted development capabilities to general availability. The release matters for IT teams and makers because it speeds app delivery, improves usability, and adds more structured ways to adopt AI-assisted app building.
Microsoft has launched a public preview of self-service onboarding for new Microsoft Entra App Gallery applications. The new workflow lets publishers validate OIDC, SAML, and provisioning integrations before submission, then create, submit, and track app listings in the Entra admin center, reducing delays and rework.
Microsoft shared new email security benchmarking results showing Defender missed fewer high-severity threats than competing secure email gateway vendors from May through July 2026. The update also highlights stronger post-delivery remediation, AI-driven detection improvements, and new protections that matter as phishing and impersonation attacks become more convincing.
Microsoft is urging organizations to move from broad security guidance to concrete exposure-reduction actions as AI accelerates cyberattacks across identities, endpoints, apps, and networks. Through Secure Now in Microsoft Security Exposure Management, security teams can prioritize foundational controls that reduce risk from autonomous attacks, phishing, lateral movement, and weak authentication paths.
Microsoft is positioning Entra Private Access as a practical replacement for traditional VPNs, using identity-driven, per-app access instead of broad network tunnels. The guidance outlines a phased migration approach that helps IT teams reduce attack surface, strengthen Zero Trust controls, and simplify remote access operations.