Autonomous attack workflows connect tools, adapt to results, and reduce human delay. Learn how defenders can prepare for faster attacks and predictive defence.

Audit mode gives you visibility, not protection. Learn how to read ASR data, tune exclusions, and confidently move rules to block mode using Intune.

A practical JWT and OAuth foundation for Microsoft security research: token structure, claims, authentication flows, and where validation goes wrong.

A short update: azurewithtom.com has been rebranded to securitywithtom.com with a new name, logo, and a broader security focus.

A confirmed and fixed Microsoft Entra PIM flaw reported to MSRC - learn what happened, how it was fixed, and what admins should check.

In this post, we’ll break down what it does, when you need it, and how to align it with your organization’s update strategy.

Exchange Online disables Basic Authentication for SMTP AUTH in December 2026. Find affected apps and printers, check sign-in logs, and migrate to OAuth in time.

Windows Autopatch now updates Windows, Microsoft 365 Apps, Edge, and Teams from one service. See what changed in 2025: hotpatching, reporting, and more.

Configure Defender ASR rules in Intune to stop malware before it executes. Covers audit mode, policy scoping, exclusion risks, and ASR reporting.

The E5 Security add-on brings Defender for Endpoint P2, Defender for Identity and Entra ID P2 to Microsoft 365 Business Premium. Licensing and setup explained.