CoreView launches Intelligence Labs for Microsoft 365 security research

CoreView has launched Intelligence Labs to publish Microsoft 365 security research and practical guidance, led by security chief Kasper Lindgaard. The move targets common gaps in tenant defenses as many IT leaders say their posture is strong even while foundational controls are still missing.

Why it matters: - Microsoft 365 is a core business system, so security gaps can expose identity, access and tenant data at scale. - CoreView is aiming to narrow the gap between perceived security maturity and actual control coverage. - The launch focuses on practical guidance that security teams can use to harden Microsoft tenants.

What happened: - CoreView launched CoreView Intelligence Labs to help security practitioners understand what is happening inside Microsoft tenants and close existing and emerging security gaps. - The initiative will publish technical research and practical guidance on Microsoft 365 security. - CoreView VP of Security Strategy Kasper Lindgaard will lead the effort. - Lindgaard previously led Secunia Research and served as a CISO in highly regulated services environments.

The details: - The launch is intended to course correct what CoreView sees as a false sense of security in IT environments. - CoreView cited a finding that 62% of IT leaders describe their Microsoft 365 security posture as established or advanced. - More than half, or 54%, are missing at least one foundational control. - The missing controls include full MFA coverage for administrators, privileged access management and configuration tamper detection. - Lindgaard said Intelligence Labs is designed to help practitioners understand what is actually happening inside their tenants and how changes affect security posture. - Lindgaard said the goal is for Intelligence Labs to become a reference point for Microsoft 365 security practitioners. - At launch, the Labs content covers authentication methods in Entra ID and non-human identities. - The initial material also includes guidance on enterprise application authentication and Microsoft’s passkey rollout.

Between the lines: - The launch reflects a broader security problem in cloud identity environments: teams can believe controls are mature while critical basics remain incomplete. - By centering research on tenant behavior and configuration changes, CoreView is positioning the Labs as both an education source and a practical diagnostic tool. - The focus on authentication and non-human identities suggests identity security remains the main pressure point in Microsoft 365 environments.

What's next: - CoreView said Intelligence Labs will continue publishing practical guidance for Microsoft 365 security. - The Labs will also analyze newly disclosed attacks and explain what they mean for organizations securing their environments. - CoreView will use the initiative to help practitioners track changes that affect tenant resilience.