Microsoft 365 Update: 5 New Security Features You Should Enable Now

Microsoft quietly rolled out five new security features in the April M365 update. Most are turned off by default. Here's what they do and how to enable them.

Elevate Solutions

April 15, 2026 · 6 min read

Off by default, valuable on

Microsoft's April update added several protections that ship disabled. Enabling them takes minutes and closes real gaps.

The five to enable

Stronger default Conditional Access templates
Expanded Safe Links coverage for Teams
Tighter external sharing defaults in SharePoint/OneDrive
Improved token-protection signals
Better admin alerting for risky sign-ins

Verify, then tune

Turn them on, then confirm they don't break legitimate workflows. We apply and tune these across managed tenants as part of standard care.

Elevate Solutions

Security & IT Advisory Team

Threat Intelligence Windows

Windows: New Ransomware Variant Bypasses Defender — What to Check Now

A new ransomware strain is using signed Windows drivers to disable Microsoft Defender before encrypting files. Here's how to detect it and what compensating controls to deploy.

April 22, 2026 · 6 min

Cybersecurity

5 Cybersecurity Mistakes Small Businesses Make in 2026

Most small businesses think they're too small to be targeted. The data says otherwise. Here are the five most common mistakes we see — and how to fix them before they become breaches.

April 21, 2026 · 6 min

Threat Intelligence

Threat Actor Spotlight: Scattered Spider — How They Breach Companies Like Yours

Scattered Spider is the threat group behind some of the most devastating breaches of 2025–2026, including attacks on major enterprises and dozens of mid-market companies. Here's how they operate and how to defend.

April 21, 2026 · 8 min