Nex
7 MIN READ / Technical article
Protecting Microsoft 365 from Primary Refresh Token Theft
Connect endpoint protection, identity controls, application permissions, and incident response to reduce session theft risk.
Read article ↗SOURCE-DATE ARCHIVE
September 2026
Original articles, newsletter issues, source publications, and practitioner drafts associated with this month. Publication dates are shown on each article.
Article and newsletter publication dates match their original publication dates. Separate source dates identify explicitly retrospective posts. Archive placement does not imply an earlier Nexlinks publication.
42 MIN READ / Newsletter
September 2026 Technology Newsletter
A historical monthly edition covering Microsoft cloud, security, collaboration, and hybrid infrastructure updates.
Read newsletter ↗
3 MIN READ / Technical article
Microsoft ISOC: what changes for Defender and Sentinel
ISOC changes where security operations can start. The useful decision is which workflows can operate in Defender and which still need workspace-backed SIEM capabilities.
Read article ↗1 MIN READ / Short update
Giving something back through technology
Something has reminded me lately that it’s important to stay humble and find ways to give something back.
Read update ↗1 MIN READ / Short update
Identity visibility belongs in the security review
Identity is still one of the hardest attack surfaces to see clearly. Microsoft just made the Identity Security Dashboard and Coverage & Maturity generally available in Defender XDR, bringing identity risk and…
Read update ↗
2 MIN READ / Short update
AI alignment needs operational governance
AI may be surrounded by hype. That doesn’t mean the technology itself is overhyped.
Read update ↗1 MIN READ / Short update
Security capability needs an operating model
Something I’ve been reflecting on lately is how often Cybersecurity conversations start with technology, when the harder problem is usually what happens after the technology is in place.
Read update ↗4 MIN READ / Technical article
Purview E3 and E5 licensing: start with the control you need
Match licensing to the required protection, workload, and users who benefit. A feature appearing in the portal does not establish that the organization has licensed its intended use.
Read article ↗