GTconsult

19/08/2026

Text message codes for MFA are being retired.

Microsoft is pulling SMS and voice authentication out of Entra ID from 1 February 2027. Passkeys are now the default.

Here's why it matters. SMS and voice are some of the easiest MFA methods to phish, SIM-swap, or replay. Passkeys close all three.

Auto-enrolment starts 1 September 2026. If you haven't moved your users off SMS or voice by then, Microsoft starts moving them for you.

What's changing, the key dates, and how to get ahead of it before the deadline:

Microsoft is retiring SMS and voice MFA in Entra ID on 1 February 2027. Here's what's changing, the key dates, and how to move your business to passkeys before the deadline.

06/08/2026

Think you might be exposed to a SharePoint vulnerability? Here's the two-minute check: log onto your SharePoint servers and check your Windows updates for the KB reference tied to your latest security patch. Then cross-reference that KB against Microsoft's Security Update Guide by searching the relevant CVE number directly. That guide shows you exactly which version you're on and whether the fix has already been applied.

Heads up: Microsoft has a new SharePoint patch landing on 12 August addressing a serious on-premises vulnerability. If you're running SharePoint on-prem (Subscription Edition, 2019, or 2016), watch for that release and get it installed as soon as it's out. SharePoint Online / M365 is not affected. Patches are released monthly, so always check against the current KB rather than a number you saw last month.

28/07/2026

A breach isn't the scary part. What happens after is.

When attackers steal IIS machine keys, they're not just getting in, they're planting malware inside the same trusted system that serves content to every one of your users. Your SharePoint environment becomes the delivery mechanism, sending malicious links to people who have no reason to question them because the request is coming from somewhere they already trust.

"It's now this trusted place where code can live that gets served to your users." — Kyle Farr, GTconsult Security Analyst

Watch the full breakdown of the SharePoint CVEs and what to check today: https://www.youtube.com/watch?v=_iFFg7Zjya4&t=2s

23/07/2026

We asked Kyle one question: if you're still running SharePoint on-premise, what's the first thing to check this week?

Full breakdown on all four vulnerabilities, the KB patch references, and what to check for your version: https://www.gtconsult.com/blogs/post/four-sharepoint-vulnerabilities-are-being-actively-exploited-here-s-what-to-do

15/07/2026

SharePoint Server 2016 and 2019 officially lost Microsoft support on 14 July 2026.

No more patches. No more technical support. No more safety net for whatever vulnerability turns up next.

Your farm is still running today, and that's exactly why it's easy to miss. But every unpatched CVE from here on stays open. Permanently.

We break down what actually changed, the real compliance and security risk, and the four things to do this week if you're still on 2016 or 2019.

Read it here: https://www.gtconsult.com/blogs/post/sharepoint-2016-and-2019-are-now-unsupported.-here-s-what-that-actually-means.

14/07/2026

It's happening. 🔴

Today's the day: SharePoint Server 2016 and 2019 officially reach end of support.

No more security patches. No more bug fixes. No more Microsoft support tickets. If you're still running 2016 or 2019, you're now on your own against every new vulnerability that gets discovered from here on out.

The good news: you still have options, whether that's SharePoint Online, SharePoint Server Subscription Edition, or a hybrid path. But the clock that mattered has now run out.

Need a hand figuring out where you stand? Let's talk

01/07/2026

13 days until SharePoint 2016 and 2019 hit end of support. How's it looking?

18/06/2026

Another month, another SharePoint CVE.

What makes it worth your attention: exploitation only needs a Site Member permission, which is the default access level for most people in a typical SharePoint environment. No admin rights required.

Swipe through for what it is, how it works, who is affected, and what to do before SharePoint 2016 and 2019 support ends on 14 July 2026.

🎥 Full conversation with our Security Analyst Kyle Farr and 📖 the complete breakdown:

Watch the full conversation with Kyle Farr here: https://youtu.be/i90U7wgdnVw

Read the complete breakdown on our blog: https://www.gtconsult.com/blogs/post/cve-2026-45659-explained-what-the-sharepoint-rce-vulnerability-means-for-your-on-prem-environment

16/06/2026

Honouring the past, celebrating the present, and believing in the future!

We hope you are enjoying the much-needed RNR today 😁

09/06/2026

CVE-2026-262… CVE-2026-what?! 😅

Boitumelo had one job: read the CVE numbers. And honestly, we don't blame her for the Lilo & Stitch comparison because at this point these vulnerability names really do sound like experiment classifications.

But jokes aside, the sheer number of SharePoint CVEs in the last year alone tells you something important: patching and monitoring your environment is not optional anymore.

Watch the full conversation with GTconsult Security Analyst Kyle Farr to understand what CVE-2026-45659 actually means for your SharePoint On-Prem environment and what you should be doing about it right now.

🔗 https://youtu.be/i90U7wgdnVw