Resources / Tech Insights

Resources

Tech Insights

Practical notes for people who run Microsoft 365, identity, endpoints and security.

Illustration for: Entra Sign-In CSP Starts Mid-October — Test Injected Scripts This Week

4 October 2026

Entra Sign-In CSP Starts Mid-October — Test Injected Scripts This Week

Microsoft will enforce Content Security Policy on login.microsoftonline.com from mid-to-late October 2026, blocking external script injection. Here’s what New Zealand mid-market and public-sector tenants should check before rollout.

 Illustration for: Entra SSPR Portal Can Enumerate Users and MFA Methods — What NZ Tenants Should Check This Week

29 September 2026

Entra SSPR Portal Can Enumerate Users and MFA Methods — What NZ Tenants Should Check This Week

LevelBlue SpiderLabs showed that Microsoft’s public password-reset portal can confirm work accounts, list registered reset methods, and surface likely admins — with CAPTCHA gone since August 2026. Here’s what New Zealand mid-market and public-sector tenants should tighten now.

 Illustration for: Entra Connect Sync Stops 30 September — Check Your Version This Week

20 September 2026

Entra Connect Sync Stops 30 September — Check Your Version This Week

Microsoft’s hard stop for outdated Entra Connect builds is ten days away, and 2.6.91.0 just shipped with security fixes. Here’s what New Zealand hybrid tenants should verify before sync fails.

 Illustration for: Passkey Lures Are Hitting M365 — What NZ Tenants Should Tighten This Week

13 September 2026

Passkey Lures Are Hitting M365 — What NZ Tenants Should Tighten This Week

Microsoft is tracking helpdesk-style “update your passkey” calls that lead to AiTM and device-code compromise of Microsoft 365. Here’s what that means for New Zealand tenants — and what to change in Conditional Access.

 Illustration for: Another Critical Entra ID CVE — What NZ Tenants Should Actually Do

6 September 2026

Another Critical Entra ID CVE — What NZ Tenants Should Actually Do

Microsoft disclosed CVE-2026-62916 (CVSS 9.1) on 3 September. The service-side fix is already in. Here’s what that means for New Zealand Microsoft 365 tenants.

 Illustration for: 5 High-Impact Ways to Improve Your Microsoft Secure Score This Month

26 August 2026

5 High-Impact Ways to Improve Your Microsoft Secure Score This Month

Most organisations can make meaningful Secure Score gains quickly by focusing on a small number of high-impact identity and core controls.

 Illustration for: What the Recent Critical Entra ID Vulnerability Teaches Us About Identity Posture

25 August 2026

What the Recent Critical Entra ID Vulnerability Teaches Us About Identity Posture

A critical CVSS 10.0 vulnerability in Microsoft Entra ID was disclosed last week. Here’s what it really means for your organisation’s identity posture and Secure Score priorities.