OneDrive transitions to the new Microsoft domain! OneDrive is transitioning to the cloud.microsoft domain. Users will start seeing new URLs as part of their OneDrive experiences. Existing links continue to work. Both domains will operate side by side indefinitely. As part of this transition, OneDrive URLs will change: Previous domain: contoso-my.sharepoint.com/ Unified domain: onedrive.cloud.microsoft/ Rollout Schedule: General Availability (Worldwide): Rolling out in early July 2026 and expect to complete by late June 2027. Who is affected: - All users accessing OneDrive. - Admins managing Microsoft 365 environments, network configurations, and custom solutions. Platforms/Services: - OneDrive (web primarily) What will happen for users: - Users will start seeing the cloud.microsoft domain in their OneDrive experiences (e.g., onedrive.cloud.microsoft instead of contoso-my.sharepoint.com). - When users access content from geos different than their own, they will see a globe icon. - No changes to file access, sharing, or collaboration functionality. - The previous domain and unified domain will continue to exist side by side. Existing links will continue to work. What will happen for admins: - No changes to admin functionality. - The SharePoint URLs used for file storage and APIs remain unchanged (e.g., contoso-my.sharepoint.com continues to work for API calls). - Important: Organizations with custom solutions that rely on OneDrive URL patterns should review those dependencies. Official Microsoft APIs (Microsoft Graph) will continue to function without changes. Custom solutions that parse or hardcode browser URLs may require updates. What is NOT changing: - Existing links and bookmarks will continue to work. Links to previous domains are backwards compatible and will remain supported. - There are no forced redirects from legacy URLs. Both domains will work side-by-side during and after the transition. - SharePoint site URLs (e.g., contoso.sharepoint.com) are not affected by this change. - Microsoft Graph APIs and other official APIs are not changing. - File ownership, permissions, and sharing settings are unchanged. - Consumer OneDrive URLs are not changing at this time and remain on live.com domain. Action Required/Recommendations: No immediate action is required, but we recommend the following: - Review any custom solutions that depend on OneDrive URL patterns. - Ensure network rules allow traffic to *.cloud.microsoft. - Update internal documentation and training materials with the new URL format. - Prepare helpdesk teams for user questions about URL changes. - Educate users to recognize the cloud.microsoft domain as trusted. Optional administrative considerations: - Review tenant allow list settings for external sharing. - Evaluate Tenant Restrictions v2 if applicable to your organization. - Consider upcoming capabilities such as anonymous link controls. #Microsoft365 #OneDrive #SharePoint

Microsoft Foundry: End-to-End Workshop monuminu.github.io/foundry-w… #MachineLearning #ChatGPT

Microsoft recently released Fara-7B, a 7B model for computer-use tasks. AI is moving from answering questions to operating software… powerful, but also raises the bar for security, permissions, sandboxing, audit trails, and governance. github.com/microsoft/fara

Just spotted Microsoft’s AI Learning Advisor agent. Teaches and troubleshoots: - Copilot Agent Builder - Copilot Studio - Power Platform - Power Apps - Power Automate - AI Builder - Dataverse Grounded in Microsoft Learn. The best part? You can use it with Copilot, or add it to a chat or meeting.

🚨 The NEW #CopilotStudio is here after #MSBuild 2026... and it's a BIG change! 🤯 This isn't just new features, Microsoft has also renamed, relocated, and REMOVED several capabilities. 😮 ✅ Workflows ✅ New AI & Behavior settings ❌ Topics gone ❌ Child Agents gone ❌ Activity gone ❌ Several channels removed If you use Copilot Studio, watch this before the new experience rolls out. It may also be the right time to share your feedback with Microsoft. 💬 🎥 Watch here: youtu.be/WkqZCihgfL8 Watch 👀 or bookmark 🔖, learn 🧠 and share🥰. #Microsoft #CopilotStudio #PowerPlatform #AI #GenerativeAI #M365Copilot #MicrosoftBuild #Automation #LowCode #NewFeatures #2026Enhancements

Hardening Intune, by @Carlos_Perez Part 1: The Privileged Roles Nobody Talks About trustedsec.com/blog/the-priv… Part 2: The Implementation Guide trustedsec.com/blog/hardenin…

This week's Entra News is out. Featuring @_ar0x4, @benoit_hamet, @DanielatOCN, @DebugPrivilege, @JaliyaUdagedara, @_sigil, @doolanke, @12Knocksinna and more!

‼️🚨 This is alarming: Researchers found a one-click data exfiltration vulnerability in M365 Copilot. A single click on a trusted microsoft[.]com link let attackers pull emails, MFA codes, meeting notes, and SharePoint/OneDrive files, no permissions or second click required. Microsoft has patched it as CVE-2026-42824, rated critical.

This is neat!

Interesting

Burp Suite Professional costs 475 dollars a year per seat. A senior software engineer in Amsterdam built the open source replacement as a side project. He put it on GitHub for free. It has 10,569 stars. His name is David Stotijn. The software is Hetty. Here is what Hetty is. An HTTP toolkit for security research. A machine-in-the-middle proxy that sits between your browser and the target. Every request and every response flows through Hetty. You can read them, search them, intercept them, edit them, replay them, and send them again. This is the core loop of every web application security test ever performed. Burp Suite charges 475 dollars a year for it. Hetty does the same job for zero. Here is the feature set. A machine-in-the-middle HTTP proxy with full logs and advanced search. An HTTP client for manually creating and editing requests, and replaying any request you already proxied. Request and response interception for manual review, with full edit, send, receive, and cancel control. Scope support to keep your work organized to a single target. A web-based admin interface that runs in your browser. Project-based database storage so multiple engagements stay separate. A GraphQL service for programmatic access. The installer is a single Go binary. Works on macOS, Linux, and Windows. No Java runtime, no enterprise license server, no machine fingerprinting, no telemetry. Here is the price ladder. Burp Suite Professional: 475 dollars a year per seat. Burp Suite Enterprise: thousands per year, contact sales for a quote. Burp Suite Community Edition: free, but throttled, no scanner, no project save, no intruder rate. OWASP ZAP: free and open source, now owned by Checkmarx after a 2024 acquisition. Hetty: zero. Forever. One binary. No account. A pentester working full time pays Burp 475 dollars a year. A team of 10 pentesters pays 4,750 dollars a year. A bug bounty hunter who finds one vulnerability has already paid for Burp twice over. Or they download a 30 MB Go binary written by a freelancer in Amsterdam and keep every dollar they earn. David has not pushed a new commit in 16 months. The last commit was January 13, 2025. That is normal for a tool that is feature-complete. HTTP has not changed. The proxy still proxies. The intercept still intercepts. MIT licensed code does not expire when the maintainer takes a break. Buy a domain. Find a bug. Cash a bounty. PortSwigger took a free industry tool and put it behind a 475 dollar paywall. A freelancer in Amsterdam gave it back. On every platform. For zero dollars. Your proxy. Your binary. Your bounties. (Link in the comments)

How to build your first AI agent (Full guide)

With the June #Microsoft #security update, #Windows Server now supports DNS over HTTPS (DoH). #windowsserver #winserver techcommunity.microsoft.com/…

Microsoft’s new AI-powered Terminal is not just Windows Terminal with a few extra tricks. It feels like a different tool entirely, built around guided commands, smarter context, and a workflow that helps you get things done faster. It is a fresh take on the command line that could reshape how Windows developers and power users work. Our Windows expert, Mauro, takes a look at it and shares his experience in our latest feature🔗windowscentral.com/microsoft…

Manage AD User and Group Relationships Using PowerShell m365scripts.com/security/man…

Why didn’t somebody tell me before that local AI agents are already running on our managed devices? 😩 Right now in our tenant: • 6 AI agents detected • 3 unique agents (Hermes, Claude Code, OpenClaw) • Running on 29% of onboarded devices The FREE Intune Dashboard now includes a dedicated **AI Agents** tab that proactively scans and shows exactly which local AI agents are installed across the fleet. @MSIntune #Intune

For years, "secure" meant MFA a compliant device. AI agents just broke that. They decide and act faster than any human the split-second of latency that used to give you time to react is gone. An agent can run away with your data before you read the alert. 1/3

This is really big news. Google introduced the Open Knowledge Format (OKF) - a standardized way to store information in a directory of markdown files. Makes it really easy to make a digital brain that agents can use. These files can serve as a living wiki. You can give agents the ability to query them or edit them. They can interlink. Seems to me this could replace Notion or Obsidian. I can think of so many uses for this. Google's blog post: cloud.google.com/blog/produc… An easier to understand explanation is the SPEC.md file: github.com/GoogleCloudPlatfo… I gave those two links to Antigravity and asked how we could use it for any of the projects we're working on. It came up with so many ideas. I would imagine Claude Fable 5 would whip up some pretty amazing things based on this system. Currently creating an OKF library of our pepper garden. It's going to be a fun weekend.

$kura When even Bryan Johnson the guy optimizing every biomarker to outrun death stops to highlight an oncology drug, pay attention. daraxonrasib, a pan-KRAS therapy that roughly doubled survival in metastatic pancreatic cancer (6.7 → 13.2 mo) with fewer side effects than chemo.

$KURA: FDA-approved drug, 96% frontline CRc, central MRD hitting the Phase 3 co-primary, $7B TAM — at a sub-$800M market cap. At some point the data wins. Quietly accumulating. 📈