Mirko Peters - Founder of m365.fm, m365.show and m365con.net

M365.FM - Modern work, security, and productivity with Microsoft 365

News EN ↓ 705 episodes

Welcome to the M365.FM — your essential podcast for everything Microsoft 365, Azure, and beyond. Join us as we explore the latest developments across Power BI, Power Platform, Microsoft Teams, Viva, Fabric, Purview, Security, and the entire Microsoft ecosystem. Each episode delivers expert insights, real-world use cases, best practices, and interviews with industry leaders to help you stay ahead in the fast-moving world of cloud, collaboration, and data innovation. Whether you're an IT professional, business leader, developer, or data enthusiast, the M365.FM brings the knowledge, trends, and s...

Author

Mirko Peters - Founder of m365.fm, m365.show and m365con.net

Episodes

Microsoft 365 Threat Analytics: Why Your Threat Analytics Is Useless (And How to Fix It) 05.12.2025 28:40

(00:00:00) The Power of Threat Analytics (00:00:01) The Neglect of Threat Analytics (00:00:49) The True Potential of Threat Analytics (00:01:57) The Covenant: Read, Test, Act, Verify (00:04:55) The Three Oversights That Make Threat Analytics Ineffective (00:09:49) The Hour of Ordered Steps (00:16:46) Two Live Scenarios: Token Theft and Living Off the Land (00:23:14) Measurement and Governance: The...

M365 Audit Logs Zero Trust: The Microsoft 365 Audit Logs You’re Ignoring 04.12.2025 40:59

(00:00:00) Zero Trust and Log Analysis (00:00:21) The Importance of Continuous Monitoring (00:00:37) Identity Verification: The First Line of Defense (00:01:26) Risky Sign-Ins: The Early Warning Sign (00:02:42) Combining Logs for Comprehensive Visibility (00:05:44) The Power of Lateral Movement Detection (00:07:51) Data Staging: The Next Stage of Attack (00:12:53) The Critical Role of Retention Po...

M365 Social Engineering Attacks: Why Your Microsoft 365 Security Fails Against Pretexting in Teams 04.12.2025 43:54

(00:00:00) Microsoft 365 Security Alert (00:00:06) The Weakness in MFA (00:00:52) Case File 1: Teams Phishing Inside the Perimeter (00:02:02) Corrective Doctrine for Teams Security (00:06:53) Case File 2: Device Code Flow MFA Evasion (00:08:26) Strengthening Device Code Security (00:13:37) Case File 3: App Consent Abuse (00:15:27) Governance of App Permissions (00:21:03) Case File 4: SharePoint Li...

Teams Security Hardening: Why Teams Channels Are Not Secure by Default 03.12.2025 26:22

(00:00:00) The Importance of Secure Microsoft Teams Configuration (00:00:43) Case Studies: Guest Access Gone Wrong (00:02:49) The Truth About Private Channels (00:03:44) MFA for Everyone: The First Layer of Defense (00:05:27) Device Compliance and Session Controls (00:07:14) Guest Access Governance: The Second Layer (00:08:54) DLP: The Tripwires in the Carpet (00:14:09) Guest Life Cycle Management...

Defender XDR Hybrid Security: Why Your “Hybrid Security” Is a Lie 03.12.2025 25:54

(00:00:00) The Siloed Security Dilemma (00:00:04) The Rube Goldberg Machine of Security Tools (00:00:18) The Four Blind Spots of Siloed Security (00:01:09) The Limitations of Siloed Tools (00:02:22) The Cost of Inaction (00:04:45) Introducing Defender XDR (00:06:19) Blind Spot 1: 365, Email, and Identity (00:10:36) Blind Spot 2: Identities Without Context (00:14:58) Blind Spot 3: Endpoints Without...

M365 Attack Chain: Why Your Microsoft 365 Breach Model Is Wrong 02.12.2025 26:45

(00:00:00) Mission Briefing: Protecting Against Tenant Breaches (00:00:41) The Enemy's Tactics: Consent Phishing and Token Theft (00:04:35) The Attack Chain: From Consent to Token Abuse (00:06:22) Detecting and Preventing Consent Phishing (00:14:41) Lateral Movement: From Mailbox to SharePoint (00:17:23) Exfiltration and Data Theft (00:20:26) Implementing Effective Defenses (00:26:01) Closing Rema...

Entra ID OAuth Consent Attack: Why Your MFA Is Useless Against Illicit Grants 02.12.2025 29:09

(00:00:00) The MFA Illusion (00:00:00) Consent Bypassing MFA (00:00:54) The Power of OAuth Consent (00:02:08) Persistence and Refresh Tokens (00:02:27) Admin Consent: The Ultimate Key (00:05:47) The Three Non-Negotiable Controls (00:12:11) Case Study: MFA Fails to Stop OAuth Attacks (00:16:48) Detection and Remediation Strategies (00:25:06) Hardening and Ongoing Monitoring (00:28:37) The Consent C...

Power BI Report Governance: The Doctrine of Distribution for Truthful Dashboards 01.12.2025 29:52

(00:00:00) The Heresy of Manual Sharing (00:00:42) The Dangers of Scattered Truth (00:02:26) The Sanctuary of Org Apps (00:02:57) The Five Pillars of Governance (00:05:51) The Importance of Roles and Boundaries (00:09:57) The Lamp That Goes Out (00:14:19) The Canonical Doorway (00:20:35) The Procession of Deployment (00:24:27) The Thirty-Day Right of Migration (00:29:16) The Charge and Call to Act...

Excel Is Not a Database: Power Apps Dataverse Migration Explained 01.12.2025 27:00

(00:00:00) The Excel Dilemma (00:00:29) The Hidden Dangers of Spreadsheets (00:02:58) Excel vs. Databases: A Fundamental Difference (00:04:07) The Three Fatal Failures of Excel (00:07:49) Introducing Data Verse: A New Paradigm (00:09:24) Data Verse Features and Benefits (00:12:30) The Correct Migration Strategy (00:16:35) Data Landscape and Tool Selection (00:20:10) The Ten-Step Migration Plan (00...

Conditional Access Policy: Your Conditional Access Has Trust Issues (Here’s How to Fix Them) 30.11.2025 25:25

(00:00:00) Conditional Access Troubleshooting (00:00:30) Overbroad Exclusions: The Invisible Leaks (00:04:56) Device Compliance Gaps: Setting Clear Boundaries (00:09:02) Token Theft Scenarios: Protecting Against Session Hijacking (00:12:46) Building a Calming Baseline (00:18:06) Safe Rollout Test Plan (00:20:34) Monitoring and Alerts for Healthy CA (00:25:02) Closing Thoughts and Next Episode Prev...

LangChain4j Copilot Governance: Y’all Need Governance for AI Agents 30.11.2025 22:47

(00:00:00) AI Governance Challenges in LLMs (00:00:32) The Prompt Injection Threat (00:01:10) Output Validation and Tool Registry (00:02:21) Copilot Studio's Naive Grounding Pitfall (00:03:05) Fixing the Gaps in LLM Governance (00:05:15) The Permissive Connector Dilemma (00:07:12) Access Control and Secret Management (00:09:22) Audit Logging and Visibility (00:13:17) Agent RBAC and Identity Manage...

GPU Inference Performance: The Compute Lie Killing Your AI Latency 29.11.2025 22:28

(00:00:00) The Mysterious GPU Slowdown (00:03:31) The Silent Saboteur: CPU Fallback (00:07:43) The Hidden Pitfalls of Version Mismatch (00:12:24) The Container Culprit: Efficiency Erosion (00:16:52) The Remedy: Provable Acceleration (00:22:05) Closing Thoughts and Next Steps In this episode of M365.fm, Mirko Peters investigates a familiar horror story in AI operations: GPU bills climbing while GPU...

Legacy Java Modernization: Stop Fixing Legacy Java by Hand and Let AI Do It 29.11.2025 21:18

(00:00:00) The Case for AI-Powered Java Modernization (00:00:26) The Legacy Java Dilemma (00:01:47) AI-Driven Modernization Process (00:04:22) The Assessment Phase: Exposing Technical Debt (00:12:39) Cloud Migration and Cost Optimization (00:17:06) The Results and Benefits of Automated Modernization (00:20:53) Closing Thoughts and Call to Action In this episode of M365.fm, Mirko Peters shows why m...

AI Agents Architecture: The Secret Architecture That Makes AI Agents Actually Work 28.11.2025 26:47

(00:00:00) The Validator's Triple Check (00:00:07) Capability, Policy, and Feasibility: The Validator's Three Pillars (00:01:47) The Triogate: Ensuring Safe Execution (00:02:59) Implementation and Architecture (00:04:19) Subscribe and Watch Next Episode (00:04:36) The Executor's Role: Operations and Guarantees (00:08:41) Workflows as Graphs: Structuring Reliability (00:12:16) Observability and Sec...

Copilot Context Engineering: Stop Building Dumb Copilots in Power Platform 28.11.2025 24:00

(00:00:00) Setting the Stage for AI Governance (00:00:37) The Context Debt Problem (00:01:46) The Four Layers of Context (00:02:30) The Failure Loop and Its Consequences (00:04:45) The System Message Pattern (00:08:30) Retrieval Layer: Grounding in Data Verse (00:13:30) Tooling and Policies for Governance (00:18:49) Implementing the Spine in Copilot Studio (00:23:27) The Power of Context Engineeri...

Azure Logic Apps vs Power Automate: The 1400 Connector Lie 27.11.2025 23:35

(00:00:00) The Truth About Power Automate vs Logic Apps (00:00:05) The Importance of Governance and Hybrid Capabilities (00:00:15) Real-World Benchmarking for Enterprise Needs (00:00:39) The Myth of More Connectors = More Power (00:01:30) Power Automate vs Logic Apps: Key Differences (00:02:21) Hybrid Integration Strategies (00:02:38) Cost Considerations and Predictability (00:03:17) Scenario 1: O...

Power Automate vs Workflows Agent: The AI Workflows Agent That Replaced Your Job 27.11.2025 28:45

(00:00:00) The Power Automate vs Workflow's Agent Debate (00:00:36) The Agent's Capabilities and Limitations (00:04:08) Approvals: Click vs. Say and Ship (00:07:36) Data Sync: SharePoint to Teams (00:11:04) Incident Triage: AI-Powered First Response (00:14:40) CRM Updates: Outlook to CRM Automation (00:18:20) Onboarding: From Request to Checklist (00:20:49) The Hybrid Approach: When to Use Each To...

SharePoint Power Apps Limitations: The SharePoint Lie That Breaks Every Power App 26.11.2025 19:47

(00:00:00) The SharePoint Limitations (00:00:35) The Delegation Dilemma (00:00:38) SharePoint's Inherent Limitations (00:01:22) Data Verse: The Power Platform's Backbone (00:01:43) The List View Threshold (00:02:33) Security and Performance Challenges (00:03:30) The Relational Advantage (00:03:58) Measuring App Performance (00:08:22) Data Verse: A Game-Changing Data Engine (00:09:38) Relationships...

Power Apps Excel Data: The Power Apps Lie That Breaks Your Excel Data 26.11.2025 25:17

(00:00:00) The Excel Dilemma: When Spreadsheets Meet Data Platforms (00:00:16) The Five Failure Patterns of Data Modeling (00:00:36) The Primary Key Predicament: Unique Identifiers in Data Verse (00:04:33) The Type Trap: Data Types in Data Verse vs. Excel (00:08:54) The Lookup Labyrinth: Relationships in Data Verse vs. Spreadsheets (00:12:48) The Multipurpose Column Maze: When One Column Does Too...

Fabric Warehouse Snapshots: Stop Using Fragile Data and Get One Version of Truth 25.11.2025 23:17

(00:00:00) The Fragility of Analytics Data (00:00:33) The Problem with Analytics Data (00:01:37) The Illusion of Read Replicas (00:01:54) The Manual Export Trap (00:02:12) Data Science Instability (00:02:46) The Concurrency Conundrum (00:04:03) Introducing Snapshots (00:04:24) The Power of Snapshots (00:08:22) Implementing Snapshots (00:13:34) Month-End Snapshots in Finance In this episode of M365...

Canvas Apps App Builder: The Rebirth of Canvas Apps Is a Lie 25.11.2025 21:28

(00:00:00) The Truth About Canvas Apps and App Builder (00:00:36) The Deceptive Familiarity of App Builder (00:00:54) The SharePoint Trap and Data Verse Superiority (00:01:37) Workflows and Governance: A False Sense of Security (00:04:18) The Personal vs Enterprise Split (00:08:34) The Migration Cliff: When Toys Become Critical Systems (00:12:30) Governance That Works: DLP, Permissions, and Restri...

SharePoint Agents Data Leak: Stop SharePoint Agents From Leaking Your Data (The IT Pro Fix) 24.11.2025 20:06

(00:00:00) SharePoint Agents and Data Security (00:00:34) The Agent's Perspective: Permissions and Retrieval (00:01:23) Grounding and DLP: The Missing Links (00:02:21) Scope Control: The Foundation of Governance (00:03:16) The Agent's Mental Model: A Step-by-Step Guide (00:03:42) The Dangers of Inheritance and Scope Overlap (00:08:33) Hardening Inheritance and Labeling (00:13:30) Approval Gates an...

Copilot Learning Center: Stop Training Your Users Wrong and Build a Governed Hub 24.11.2025 19:34

(00:00:00) The Copilot Training Dilemma (00:00:30) The Limitations of Traditional Training (00:01:50) The Shadow Training Economy (00:02:42) Building an Evergreen Copilot Learning Center (00:03:38) The Architecture of the Copilot Hub (00:04:58) Implementing Governance and Search (00:10:19) Safety Scaffolding and Feedback Loops (00:11:14) Case Study: Enterprise Adoption Success (00:14:21) The Gover...

Power Automate Email Flows: Stop Sabotaging Compliance and Do Email the Microsoft Way 23.11.2025 27:40

(00:00:00) The Service Account Dilemma (00:00:30) The Flaws of Service Accounts (00:02:46) The Importance of Non-Human Identities (00:08:16) Implementing App Registration and Policies (00:13:27) Crafting the Graph API Request (00:18:31) Building a Custom Power Automate Connector (00:22:51) Auditing and Monitoring Your HR Automation (00:25:30) Incident Prevention and Run Books (00:27:11) Closing Th...

SharePoint Sprawl: SharePoint Sprawl Is Killing Your Business (Here’s How to Stop It) 23.11.2025 23:45

(00:00:00) The SharePoint Sprawl Problem (00:00:34) The Reality of SharePoint Sprawl (00:00:39) The Four Faces of Sprawl (00:01:00) The Search Nightmare (00:01:42) Root Causes of Sprawl (00:02:29) Measuring Sprawl's Impact (00:03:18) Governance: The Solution (00:04:17) Ownership and Life Cycle Management (00:08:39) Provisioning: The Prevention Strategy (00:13:41) Retention Labels: The Scalpel of G...