Conditional Access
The latest Conditional Access coverage — news, analysis, and updates from the WindowsNews.AI desk.
FBI Warns Kali365 Phishing Kit Exploits Microsoft Device Code Flow to Slip Past MFA
The FBI’s Internet Crime Complaint Center (IC3) issued an urgent alert in May 2026 about Kali365, a newly identified phishing‑as‑a‑service platform that is systematically hijacking Microsoft...
Microsoft 365 Baseline Security Mode: One-Click Hardening with Legacy Exclusions
Microsoft has quietly rolled out Baseline Security Mode, a new opt-in feature in the Microsoft 365 admin center that allows organizations to apply a comprehensive set of security recommendations with...
MSPs Combat Microsoft 365 Configuration Drift to Stop Silent Security Erosion
When a mid-sized accounting firm underwent a routine cyber insurance assessment, the results shook the IT director. The company’s Microsoft 365 environment, initially configured with strict...
FBI Warns Kali365 Phishing Steals OAuth Tokens to Bypass MFA in Microsoft 365
The FBI has issued an urgent public warning about a phishing-as-a-service platform called Kali365 that is systematically targeting Microsoft 365 accounts by abusing device-code authentication. The...
Microsoft mandates Entra ID for Exchange ActiveSync cert auth by end of 2026.
Microsoft announced on May 8, 2026, that it will retire direct certificate-based authentication for Exchange ActiveSync (EAS) in Exchange Online by the end of 2026. The decision forces organizations...
Microsoft Entra External MFA: Policy Control Preserved, Custom Controls Retiring in 2026
Microsoft has quietly removed one of the biggest identity-management frictions for enterprise customers: the inability to cleanly use third-party MFA providers inside Microsoft Entra ID without...
Microsoft Entra ID Conditional Access Changes: What IT Admins Need to Know About All Resources Enforcement
Microsoft's upcoming enforcement changes for Conditional Access policies in Entra ID represent a significant shift in how identity security will be implemented across organizations, with the tech...
idPowerApp Visualizes Conditional Access Policies for Better Microsoft 365 Security Governance
Managing Conditional Access policies in large Microsoft 365 environments has become increasingly complex, with organizations often accumulating dozens or even hundreds of policies over time. This...
Microsoft’s Windows 365 Cloud Apps Public Preview: Stream Single Apps, Not the Whole Desktop
Microsoft took the wraps off Windows 365 Cloud Apps on September 18, 2025, pushing the service into public preview with a clear message: not every worker needs a full Cloud PC. The new capability...
Self-Service Fixes and Faster Failover: Inside Microsoft’s Latest Windows 365 Resiliency Push
Microsoft just turned the Cloud PC login screen into a self-service repair kiosk and gave IT a choice between two kinds of cross-region disaster recovery—one that’s best-effort and one that’s...
Microsoft Embeds Copilot Chat Pane in Office Apps, Turning AI Into a Workplace Utility
Microsoft has flipped the switch on a long-anticipated overhaul of its productivity suite, planting Copilot Chat directly inside Word, Excel, PowerPoint, Outlook, and OneNote. The move, part of a...
Microsoft Expands Windows Backup for Organizations with Intune-Managed OOBE Restore for Enterprise Migrations
August 2025 security updates unlock a long-awaited enterprise capability: Windows Backup for Organizations is moving to broad availability, giving IT administrators direct Intune controls to restore...