ConnectWise confirmed unauthorized access to Cloud Backup application identities. The service was taken offline as a precaution, while existing backup archives are expected to remain intact.
Microsoft and Health-ISAC obtained court approval to seize and redirect domains associated with the YAM Store marketplace and the CoGUI and Iron Man phishing kits.
Microsoft released a fix for a Windows Shell vulnerability that attackers exploited before the update was disclosed. CISA subsequently added it to the Known Exploited Vulnerabilities catalog.
Microsoft CEO Satya Nadella proposed that advanced AI systems should not be trusted on their own, but should be subject to external controls, audit logs and intervention by an authorized person.
Microsoft introduced its “hybrid intelligence” direction for Copilot+ PC. With user consent, Copilot is expected to work with local content, perform actions in Windows, and use models running directly on the device.
Proofpoint described a TA419 phishing campaign targeting US AI policy experts. The attackers used fake professional outreach and proxy-based Microsoft 365 sign-in.
The new public benchmark evaluates AI agents based on the final state of systems and the side effects of their actions—not just their text responses or successful tool calls.
Microsoft confirmed unauthorized access to the @Microsoft account on X. The attackers used it to share content from an account posing as Clippy.
The Microsoft Digital Defense Report 2026 describes observed attacks on identities, cloud environments, supply chains, and edge devices. The company also warns of AI’s growing role.
The unauthenticated CVE-2026-73570 flaw in Zimbra’s SNMP notifications allows command execution on vulnerable mail servers. A fix has been available since July.