Entra ID now supports multi-device Passkeys for password managers like 1Password
Entra ID now supports multi-device passkeys, allowing users to store their passkey in password managers like 1Password for seamless, passwordless sign-in.
Security
Remove users from Teams Chats using Microsoft Defender
Admins can now remove users from Teams group chats and 1:1 conversations directly from Microsoft Defender, helping speed up incident response and containment.
New security features for Teams chats and conversations are now in Public Preview
Microsoft is rolling out three new security features to Teams chats and channel conversations: Weaponizable File Protection, Malicious URL Protection, and the ability to report messages as not a security concern.
Why SharePoint admins should not ignore Content Security Policy violations
Microsoft is introducing Content Security Policy (CSP) in SharePoint. While it’s currently in Report-only mode, enforcement will block untrusted scripts. SharePoint administrators should review violation reports now and prepare trusted sources before enabling CSP.
Blocking legacy protocols with new Trust Center settings in Microsoft 365 Apps for Windows
Microsoft has introduced new Trust Center controls in Microsoft 365 Apps for Windows to reduce risks from legacy protocols. By default, FPRPC is now blocked, while FTP and HTTP remain allowed unless users or admins choose to disable them.
Report security risks with external users in Teams chats
Microsoft Teams has added a new capability, allowing internal users to report security risks when interacting with external users in 1:1, group, and meeting chats.
Sicherheitsinformationen für Entra ID Konten wurden aktualisiert
Microsoft hat die Sicherheitsinformationen für Entra ID Konten grafisch überarbeitet. Die Änderung wurde im September angekündigt.
Use Connect-SPOService without Basic Authentication
In the standard version, Connect-SPOService continues to use Basic Authentication for the connection to SharePoint Online. SharePoint administrators can customize it very easily.
Connect-SPOService ohne Basic Authentication nutzen
In der Standardkonfiguration nutzt Connect-SPOService für die Verbindung zu SharePoint Online weiterhin Basic Authentication. SharePoint Administratoren können es sehr einfach anpassen.
Legacy / Basic Authentication in SharePoint Online deaktivieren
Wurde es im Tenant nicht deaktiviert können alte PnP PowerShell Module weiterhin über Basic Authentication auf Inhalte in SharePoint Online zugreifen. Administratoren sollten die Möglichkeit deaktivieren.