Microsoft Rolls Out Baseline Security Mode for Office, SharePoint, Exchange, Teams, and Entra

Microsoft has begun rolling out Baseline Security Mode for Microsoft 365 tenants — an opt-in M365 Admin Center dashboard that centralizes 18–20 recommended security policies across authentication, file protections, and admin controls. The mode blocks legacy protocols, mandates phishing-resistant MFA (FIDO2/passkeys) for admins, restricts risky document behaviors and vulnerable tools, and offers simulation reports and automatic application of low-impact defaults; public preview began Nov 2025 with phased global deployment targeted through March 2026, aiming to reduce misconfigurations exploited by credential stuffing, phishing, ransomware, and supply-chain attacks.