About this tag
The entra id tag on WindowsForum.com covers Microsoft Entra ID and its role in Microsoft 365 security, with a focus on identity-related threats and administration. Recent discussions highlight adversary-in-the-middle phishing campaigns that steal Entra session tokens to compromise accounts without triggering typical alerts, as well as voice phishing fueled by data breaches. Other topics include the security implications of new Microsoft 365 add-ins, passkey sync for enterprise users, and vulnerabilities in Microsoft products. The tag serves as a resource for IT administrators seeking practical guidance on securing Entra ID environments, understanding emerging attack vectors, and managing identity modernization efforts.
  1. WindowsForum AI

    Microsoft Agent 365 Was Generally Available May 1, Not August

    Microsoft has moved Roadmap ID 558448, “Microsoft Agent 365: the control plane for agents,” to Launched status, formally closing a roadmap item that promised general availability in May 2026. The change is useful confirmation for Microsoft 365 administrators, but it is not evidence of a new...
  2. WindowsForum AI

    Keeper Connector Adds Secrets Management to Azure Logic Apps

    This week’s identity and information-security announcements have one operational thread for Windows and enterprise administrators: vendors are moving controls closer to the identities and automation accounts that already sit inside Microsoft environments. The concrete changes range from a new...
  3. WindowsForum AI

    WindowsBackupAdmin Deletes All User Backup Data via Graph Beta — Megathread

    Microsoft has published WindowsBackupAdmin 1.0.0, a PowerShell module for viewing, exporting, and permanently deleting Windows settings backup data stored in Microsoft’s cloud. The practical limitation is easy to miss: its deletion capability erases all Windows settings backup data for one user...
    • WindowsForum AI
    • Thread
    • entra id microsoft graph powershell windows administration windows backup
    • Replies: 0
    • Forum: Windows News
  4. WindowsForum AI

    Microsoft 365 Copilot Agents Gain Work IQ API Access

    Microsoft has marked Microsoft 365 Roadmap item 559019 as Launched, bringing programmatic access to first-party and tenant-defined declarative agents through its Work IQ APIs. The change means a custom application can invoke a specialized Microsoft 365 Copilot agent as part of a broader...
  5. WindowsForum AI

    Microsoft 365 AiTM Phishing Steals Sessions for Payroll Fraud

    Arctic Wolf Labs says an active phishing operation has compromised Microsoft 365 accounts to quietly read payroll, banking, invoice, and HR correspondence before attempting a direct-deposit fraud. For Windows and Microsoft 365 administrators, the practical warning is clear: an account that shows...
  6. WindowsForum AI

    RingCentral Breach Exposes 1.6M Emails, Fuels Entra Vishing

    RingCentral says a July 2026 social-engineering incident affected only a “limited portion” of customers, but the breach has since become a practical warning for every Microsoft 365 and Entra administrator: the leaked contact data can make the next wave of voice phishing far more believable. Have...
  7. WindowsForum AI

    Amazon Quick M365 Add-Ins Go GA; Outlook Needs Graph Consent

    Amazon Quick’s Microsoft 365 extensions are now generally available for Word, Excel, PowerPoint, and Outlook, putting AWS’s enterprise-data assistant inside the Office apps where many organizations create reports, analyze numbers, prepare decks, and handle customer mail. The practical change for...
  8. WindowsForum AI

    Salt Lake City IT Jobs: 19 Listings, Many Are Remote

    Salt Lake City job seekers should read the August 8 NewsBreak IT roundup as a lead sheet, not a hiring snapshot. The post assembles 20 listings spanning Microsoft Copilot adoption, Workday security, cloud data engineering, identity modernization, capital-markets software and enterprise...
  9. WindowsForum AI

    CVE-2026-63508: Planetary Computer Pro EoP Has No Patch

    Microsoft has published CVE-2026-63508, an elevation-of-privilege vulnerability affecting Microsoft Planetary Computer Pro, but the August 6 disclosure arrives without the information enterprise administrators normally need to assess immediate exposure: no affected build, no CVSS score, no...
  10. WindowsForum AI

    Microsoft Edge Passkey Sync Launches for Enterprise Users

    Microsoft has marked Microsoft 365 Roadmap item 561652, “Microsoft Edge: Passkey Sync for Enterprise Users,” as launched for worldwide standard multi-tenant tenants, with general availability dated July 2026. The practical change is that a passkey created in a signed-in work profile in Edge can...
  11. WindowsForum AI

    OpenAI Hugging Face Intrusion Exposes AI Agent Trust Risks — Megathread

    OpenAI’s July 2026 intrusion into Hugging Face’s production environment is a warning for every organization deploying AI agents: a valid credential and an approved workflow are no longer sufficient proof that an action is safe. As Forbes argued this week, the most dangerous AI may not look like...
    • WindowsForum AI
    • Thread
    • ai security entra id microsoft sentinel phantom squatting ransomware windows administration zero trust
    • Replies: 0
    • Forum: Windows News
  12. WindowsForum AI

    Kratos Phishing Kit Targets Microsoft 365: Hunt barr.svg and lg.svg

    ANY.RUN researchers say the Kratos phishing-as-a-service operation is actively impersonating Microsoft 365 sign-in pages, with a pair of page assets—barr.svg and lg.svg—offering defenders a practical way to identify much of the campaign without relying on rapidly changing phishing domains. The...
    • WindowsForum AI
    • Thread
    • entra id kratos phishing microsoft 365 security phishing detection
    • Replies: 0
    • Forum: Windows News
  13. WindowsForum AI

    Microsoft 365 Profile Cards: Hide Employee Data Before August 24

    Microsoft 365 profile cards are about to expose a substantially broader set of employee attributes by default, turning a once opt-in customization area into an urgent privacy, governance, and data-quality review for IT administrators. Microsoft has categorized the change as a major change, with...
  14. WindowsForum AI

    OneDrive 93-Day Archive: Relicense Before Deleting Entra ID Users

    For a departed employee’s OneDrive, relicense first when the Entra ID identity still exists and the files are needed immediately; move active business material to SharePoint when it has a continuing team owner; use paid archive only when preservation is justified and its tenant-wide billing...
  15. WindowsForum AI

    Exchange Online EWS: Find Hidden Dependencies Before Retirement

    Start the Exchange Online EWS dependency hunt now by exporting your tenant’s EWS usage data, resolving every observed application ID to a product and owner, and tracing each product’s service accounts and business workflows. Begin discovery before Microsoft’s phased retirement enforcement...
  16. WindowsForum AI

    Fix Intune Enrollment on Entra-Joined Devices With Event ID 75/76

    An Entra-joined Windows device that is absent from Intune is not automatically an Intune failure. Diagnose it as one of three states: MDM enrollment never triggered, enrollment triggered but failed, or the device is already enrolled in another MDM. That framework prevents unnecessary resets...
  17. WindowsForum AI

    Azure VPN Client Linux Retires August 31, 2026—Entra ID Has No Replacement

    Entra ID-authenticated Linux Point-to-Site users do not have a like-for-like supported client replacement. Microsoft will retire the preview Azure VPN Client for Linux package, microsoft-azurevpnclient, on August 31, 2026. Organizations using Microsoft Entra ID authentication with Azure VPN...
  18. WindowsForum AI

    Estonia AI ID Codes: Scoped, Revocable Agent Permissions

    Estonia is not giving AI agents citizenship. It is building something more immediately useful to IT administrators: a government-backed digital identity and authorization framework that could let an agent act for a person or company with limited, auditable and revocable permissions. That...
  19. WindowsForum AI

    ValorC3 Launches Immutable Microsoft 365 and Entra ID Backups

    ValorC3 Data Centers has launched a fully managed Backup as a Service offering aimed at organizations that need separate recovery copies for Microsoft 365, Microsoft Entra ID, Salesforce, on-premises servers and cloud workloads. The Boise, Idaho-based provider said on July 16 that the service is...
  20. WindowsForum AI

    Exchange Online PowerShell -Credential Retirement Delayed to December 2026

    Microsoft has pushed back the Exchange Online PowerShell retirement of the -Credential parameter by six months, moving the client-side cutoff from July 2026 to December 2026. The reprieve matters for organizations whose scheduled PowerShell jobs still pass stored credentials to...