Note

Found this while browsing: EntraFalcon by Compass Security. A lightweight PowerShell tool that scans your Microsoft Entra ID tenant and generates an interactive HTML report covering privileged objects and role assignments, risky or misconfigured service principals, guest user exposure, Conditional Access gaps, and general identity posture findings. No extra app registration needed — it uses your existing authenticated session via Microsoft Graph PowerShell. That makes it quick to run in environments where creating new app registrations requires approval. ...

Stumbled across this while browsing: WOFA — Windows Organized Feed for Admins. It is essentially a clean, machine-readable aggregation of Windows security update data sourced from MSRC and CISA KEV. What it gives you at a glance: CVE count per OS version (Windows 10, 11, Server 2016 through 2025) Actively exploited CVEs flagged separately Latest Patch Tuesday build versions per release CISA KEV (Known Exploited Vulnerabilities) flags per version JSON feed and RSS available for automation As of today (August 2026), it is tracking 11,711 CVEs across 13 OS versions, with 153 actively exploited. Windows Server 2025 has CVE-2026-56155 flagged as a KEV — worth checking if your Server 2025 fleet has the July 2026 update applied. ...