NexlinksField Notes from a CTO & CISO
Menu
Source-led perspectives on Microsoft technology. Explore the October briefing ↗

The source register.

Direct Microsoft, CISA, OWASP and MCP references for developed articles, with links back to the discussion they support.

Maintained documentation describes current behavior and does not establish a historical announcement date. Newsletter references appear beside their individual items. Broad release trackers are navigation aids, not evidence for every claim. Original LinkedIn commentary is identified on its own article page.

Azure MFA: make administrator access a tested control

Reviewed October 12, 2026 · Source published August 15, 2024

Announcing mandatory multifactor authentication for Azure sign-in ↗

Copilot collaboration starts with information ownership

Reviewed October 12, 2026 · Source published September 16, 2024

Microsoft 365 Copilot Wave 2: Pages, Python in Excel, and agents ↗

From vulnerability lists to decisions about exposure

Reviewed October 12, 2026 · Source published November 19, 2024

AI innovations for a more secure future unveiled at Microsoft Ignite ↗

Security agents need a reviewable operating model

Reviewed October 12, 2026 · Source published March 24, 2025

Microsoft unveils Microsoft Security Copilot agents and new protections for AI ↗

Agent 365: govern the identity before expanding the fleet

Reviewed October 12, 2026 · Source published November 18, 2025

Microsoft Agent 365: The control plane for AI agents ↗

Active Directory upgrades deserve a dependency review

Reviewed October 12, 2026 · Original documentation date unconfirmed

What's new in Windows Server 2025 ↗

Purview and AI: make the data boundary explicit

Reviewed October 12, 2026 · Original documentation date unconfirmed

Microsoft Purview data security and compliance protections for Microsoft 365 Copilot and other generative AI apps ↗

AI Agents Are Now Part of the Attack Surface

Reviewed October 12, 2026 · Original documentation date unconfirmed

Secure AI agents at scale using Microsoft Agent 365 ↗

Govern and secure AI agents AI agents across the organization - Cloud Adoption Framework ↗

AI Is Finding Vulnerabilities Faster Than Teams Can Fix Them

Reviewed October 12, 2026 · Original documentation date unconfirmed

CISO perspectives on managing vulnerability risks in the age of AI ↗

Project Perception ↗

Protecting Microsoft 365 from Primary Refresh Token Theft

Reviewed October 12, 2026 · Original documentation date unconfirmed

Understanding Primary Refresh Token (PRT) in Microsoft Entra ID - Microsoft Entra ID ↗

Aa26 237a ↗

Investigate risk with Microsoft Entra ID Protection - Microsoft Entra ID Protection ↗

Continuous access evaluation in Microsoft Entra - Microsoft Entra ID ↗

Token theft playbook ↗

How Token Protection Enhances Conditional Access Policies - Microsoft Entra ID ↗

Azure Monitor Logs reference - SigninLogs - Azure Monitor ↗

Defender for Cloud Beyond the Secure Score

Reviewed October 12, 2026 · Original documentation date unconfirmed

Microsoft Defender for Cloud Overview - Microsoft Defender for Cloud ↗

Are AI Agents About to Break Access Reviews

Reviewed October 12, 2026 · Original documentation date unconfirmed

What are access reviews? - Microsoft Entra - Microsoft Entra ID Governance ↗

Intune or Jamf for Mac Management Choosing by Use Case and Scale

Reviewed October 12, 2026 · Original documentation date unconfirmed

Deployment guide to manage macOS devices in Microsoft Intune - Microsoft Intune ↗

Is AI the New Phish

Reviewed October 12, 2026 · Original documentation date unconfirmed

Prompt Shields in Azure AI Content Safety - Azure AI services ↗

Security Applies Everywhere Not Just Your Laptops

Reviewed October 12, 2026 · Original documentation date unconfirmed

Zero Trust as a security foundation ↗

What a Co-managed XDR Service Should Deliver

Reviewed October 12, 2026 · Original documentation date unconfirmed

What is Microsoft Defender XDR? - Microsoft Defender XDR ↗

Taming Microsoft Sentinel Costs Without Losing Detection

Reviewed October 12, 2026 · Original documentation date unconfirmed

Plan costs and understand pricing and billing - Microsoft Sentinel ↗

The Breach Is Coming Response Readiness Matters

Reviewed October 12, 2026 · Original documentation date unconfirmed

Incident response overview ↗

The Next Breach May Start with a Login Not Malware

Reviewed October 12, 2026 · Original documentation date unconfirmed

Identity, the first pillar of a Zero Trust security architecture ↗

The Patient Wristband the QR Code and the Security Boundary We Forget

Reviewed October 12, 2026 · Original documentation date unconfirmed

Zero Trust as a security foundation ↗

When It Is Time to Outsource Your SOC

Reviewed October 12, 2026 · Original documentation date unconfirmed

What is Azure Lighthouse? - Azure Lighthouse ↗

Microsoft ISOC: what changes for Defender and Sentinel

Reviewed October 12, 2026 · Original documentation date unconfirmed

Integrated Security Operations Center (ISOC) in Microsoft Defender - Microsoft Defender XDR ↗

Defender for Cloud CSPM: understand the coverage you actually have

Reviewed October 12, 2026 · Original documentation date unconfirmed

Protect your resources with Defender CSPM - Microsoft Defender for Cloud ↗

Anatomy of a business email compromise investigation

Reviewed October 12, 2026 · Original documentation date unconfirmed

Respond to a compromised email account in Microsoft 365 - Microsoft Defender for Office 365 ↗

Security Copilot use cases that fit the work of a security team

Reviewed October 12, 2026 · Original documentation date unconfirmed

Prompting in Microsoft Security Copilot ↗

Understand authentication in Microsoft Security Copilot ↗

Use promptbooks in Microsoft Security Copilot ↗

Moving from Active Directory to Entra ID without losing control of identity

Reviewed October 12, 2026 · Original documentation date unconfirmed

Road to the cloud - Move identity and access management from Active Directory Domain Services (AD DS) to a Microsoft Entra migration workstream - Microsoft Entra ↗

Authentication for Microsoft Entra hybrid identity solutions - Microsoft Entra ID ↗

macOS Platform Single Sign-on (PSSO) overview - Microsoft Entra ID ↗

Purview E3 and E5 licensing: start with the control you need

Reviewed October 12, 2026 · Original documentation date unconfirmed

Microsoft Purview service description - Service Descriptions ↗

Automatically apply a sensitivity label to Microsoft 365 data ↗

Assign permissions in eDiscovery ↗

Manage audit log retention policies ↗

A modern security operating model for Microsoft environments

Reviewed October 12, 2026 · Original documentation date unconfirmed

Zero Trust as a security foundation ↗

Get started with Microsoft Defender XDR - Microsoft Defender XDR ↗

Microsoft Defender for Cloud Overview - Microsoft Defender for Cloud ↗

Learn about Microsoft Purview Data Security Posture Management (DSPM) ↗

Microsoft Zero Trust Assessment: Understand Your Security Posture Before Making Changes

Reviewed October 13, 2026 · Original documentation date unconfirmed

What is the Zero Trust Assessment? ↗

Get started with the Zero Trust Assessment ↗

Microsoft Zero Trust Assessment source repository ↗

Microsoft Zero Trust Assessment PowerShell instructions ↗

CISA SCuBA: An Independent Assessment of Your Microsoft 365 Security Configuration

Reviewed October 13, 2026 · Original documentation date unconfirmed

CISA ScubaGear official documentation ↗

ScubaGear interactive permissions ↗

ScubaGear dependencies ↗

ScubaGear reports and structured outputs ↗

ScubaGear Microsoft Graph troubleshooting ↗

ScubaGear issue #1923: authentication failures in GCC High ↗

ScubaGear issue #2146: Defender and Exchange authentication failures in version 1.8.0 ↗

ScubaGear issue #2156: version 1.8.0 authentication failures in GCC High ↗

CISA ScubaGear releases ↗

CISA Secure Cloud Business Applications project ↗

Microsoft Zero Trust Assessment vs. CISA SCuBA: Which Should You Run?

Reviewed October 13, 2026 · Original documentation date unconfirmed

Microsoft Zero Trust Assessment overview ↗

Microsoft Zero Trust Assessment PowerShell instructions ↗

CISA ScubaGear documentation ↗

ScubaGear dependencies ↗

ScubaGear reports and structured outputs ↗

ScubaGear issue #2146: version 1.8.0 Defender and Exchange authentication failures ↗

You’ve Secured Your AI Agents. But Can You Trust Their MCP Servers?

Reviewed October 13, 2026 · Original documentation date unconfirmed

OWASP MCP03:2025: Tool Poisoning ↗

OWASP MCP Security Cheat Sheet ↗

What is the Model Context Protocol? ↗