Issue #4: 4 November 2025
Dunetrails Secure Workspace Brief
Big highlights this week
Phishing attacks are evolving rapidly, with a 202% surge in email threats and a 703% increase in credential phishing over just six months, driven by AI-powered campaigns that easily bypass traditional security. Attackers now target not just email, but also collaboration tools, mobile apps, and social media, using new, unknown links that evade standard defenses. For SMBs, this means that relying solely on classic email filters is no longer enough. Modern protection requires real-time, AI-driven detection across all communication channels to keep sensitive data and business operations secure. Source: https://info.varonis.com/en/state-of-phishing-report
Microsoft Teams is rolling out a new feature in December 2025 that automatically updates a user’s work location based on the company’s Wi-Fi or connected devices, aiming to make hybrid collaboration smoother by showing who’s physically in the office. No more manual status updates. While Microsoft says this is about making real-world connections easier and not about surveillance, the feature has sparked a lot of debate on social media, with many users and IT professionals expressing concerns about privacy and feeling monitored. The community remains skeptical, questioning whether the benefits for coordination outweigh the potential for misuse or discomfort. The feature requires both IT and user opt-in and only works during defined working hours. Source: https://www.microsoft.com/en-in/microsoft-365/roadmap?id=488800
Six Signals from the Secure Workspace
Jailbreak & Root Detection in Microsoft Authenticator
Microsoft Authenticator will detect if a device is jailbroken or rooted, starting in February 2026. This helps prevent compromised devices from accessing corporate resources.
Why it matters: Strengthens MFA security by blocking high-risk devices before they can pose a threat.
Manage Windows 365 Link Devices with Intune
Admins can now manage Windows 365 Link devices directly through Intune, simplifying hybrid device management.
Why it matters: Streamlines control for organizations using Cloud PCs alongside physical endpoints.
https://inthecloud247.com/managing-windows-365-link-devices-with-intune/
Expanded Scareware Protection in Microsoft Edge
Edge now includes broader scareware blocking and real-time protection for more users.
Why it matters: Reduces risk from deceptive pop-ups and malicious downloads targeting employees.
What’s New in Microsoft Intune (October 2025)
Microsoft has rolled out new Intune features, including improved app management and compliance controls.
Why it matters: Enhances endpoint security and simplifies policy enforcement for SMB IT teams.
Your Guide to Microsoft Ignite 2025
Key sessions on Intune, Entra, and Windows security at Ignite 2025 (Nov 17–21).
Why it matters: Stay ahead of upcoming security innovations and roadmap changes.
https://techcommunity.microsoft.com/blog/microsoftintuneblog/your-guide-to-intune-at-microsoft-ignite-2025/4464594 | https://techcommunity.microsoft.com/blog/microsoft-entra-blog/microsoft-entra-at-ignite-2025-november-17-21/4400194 | https://techcommunity.microsoft.com/blog/windows-itpro-blog/your-guide-to-windows-at-microsoft-ignite-2025/4464588
Microsoft Threat Protection Monthly News (Nov 2025)
Latest updates on Defender, identity protection, and threat intelligence from Microsoft.
Why it matters: Helps SMBs align with best practices and emerging security trends.