Microsoft 365 ⁽⁶⁾

Protecting organisational data no longer stops on the devices handed out - most users sign in on their phones to check emails and files on the go. In some respects, this is a good thing. It saves the company money because they don’t need to…

Multi factor authentication is absolutely crucial to protecting accounts, but let's not forget the first line of defence, the password. Attackers have been cracking passwords since the dawn of, well, passwords. There are various methods (see here) and therefore various controls. The easiest and most…

Entra ID is the home of Microsoft identities for an organisation, but often these identities come from an on-prem Active Directory. That syncronisation is often a one-way street; accounts go up to the cloud, but changes don’t come back. Entra Password Protection enabled policies set…

Grafana is a powerhouse for observability, but it is only as useful as the data it has access to. Breaking down data silos to build an overall picture is the best thing administrators can do to provide a clear picture into their security posture, and…

Firstly, if you haven’t updated Google Chrome on all your devices, go and do so. Whilst the headlines around CVE-2026-0628 have mostly been exaggerated fearmongering, it has raised a very serious issue for administrators - do you let users install whatever browser extensions they want?…