All news with #defender for cloud apps tag

🔒 Microsoft introduced a Teams admin policy that prevents third-party bots from joining meetings without organizer approval. The feature, announced earlier in the Microsoft 365 roadmap, will roll out across Windows, macOS, Android, and iOS for multi-tenant and GCC customers. When enabled, Teams detects potential bots, places them in the lobby, identifies them clearly, and prompts organizers to admit them. Microsoft plans further controls such as allow lists, blocking policies, and audit reports to enhance visibility and governance.

🔒 Microsoft outlines a defense-in-depth approach to protect AI memory across storage, retrieval, model interaction, and user control. The post explains how memory transforms AI from stateless tool to learning collaborator, increasing attack surface and enabling staged attacks that persist beyond initial prompts. It summarizes protections in M365 Copilot including prompt-injection classifiers, Task Adherence checks, tenant policy controls, unified compliance, and audit logging integrated with Defender and Sentinel.

🔒 Microsoft will block mobile devices running outdated email software from connecting to Exchange Online if they use Exchange ActiveSync versions below 16.1, effective March 1, 2026. The change applies to native mobile email apps that rely on EAS and does not affect on-premises Exchange installations or users of Outlook Mobile, which uses a different sync method. Administrators can identify impacted devices with a provided PowerShell query and should coordinate updates with device and app vendors to avoid service disruption.