On July 13 Microsoft announced that Entra ID will stop providing SMS and voice calls as an authentication method: passkeys by default from September 1 and full retirement on February 1, 2027, with no opt-out. Anyone insisting on SMS will have to contract and pay their own telecom provider. The full timeline, why SMS was never a serious second factor, and the plan we would apply to any tenant.
On July 23 a network configuration change left Teams, SharePoint and OneDrive limping for hours: the fifth major hyperscaler outage in nine months. When your entire office lives in a SaaS there is no replica to boot and no runbook that helps: the SLA is credits, not continuity. What we wouldn't do, and the two-page plan that actually works.
On July 14 SharePoint Server 2016 and 2019 fell out of extended support, and Microsoft offers no ESU: there is no paid extension. A year ago ToolShell compromised over 400 organizations attacking on-prem SharePoint that was still receiving patches. The three real ways out, and the fourth one almost nobody offers you.
Microsoft breaks its record with 622 vulnerabilities fixed in the July 2026 Patch Tuesday, three zero-days included. The one actively exploited against SharePoint scores 5.3: here's how we triage when patching everything is not an option.
To receive IT stories, everyWAN news and exclusive subscriber offers, sign up to our mailing list
Microsoft 365
ES 
CAT 
EN