Microsoft 365

Editorial illustration of a shared-document portal beside a two-day calendar countdown, marking CISA's KEV listing of SharePoint zero-day CVE-2026-58644.

Vulnerabilities

CISA Adds SharePoint RCE Zero-Day CVE-2026-58644 to KEV Catalog With July 19 Patch Deadline

A CVSS 9.8 SharePoint zero-day joins CISA's KEV catalog with a two-day patch deadline — defender teams accelerate verification this week.

Editorial illustration of a shared-document portal showing three cracks beside an alarm bell, marking CISA's warning on three exploited SharePoint flaws, two zero-days.

Vulnerabilities

CISA Urges Immediate Patching for Three Exploited SharePoint Vulnerabilities (Two Are Zero-Days)

CISA raises the SharePoint patch stakes — three actively exploited flaws, two of them zero-days, and defender teams accelerate verification this week.

Editorial illustration of an open door with its padlock still closed, representing a SharePoint JWT authentication bypass patched by Microsoft.

Vulnerabilities

Microsoft Patches SharePoint JWT Authentication-Bypass Flaw (CVE-2026-55040)

A SharePoint JWT auth bypass patched in July's Patch Tuesday — defender verification this week.

Editorial illustration of a calendar page overflowing with adhesive-bandage patches, marking Microsoft's record 622-CVE July 2026 Patch Tuesday.

Vulnerabilities

Microsoft Ships a Record 622-CVE Patch Tuesday With Two Zero-Days Under Active Attack

Microsoft's July Patch Tuesday breaks its own record — 622 CVEs, two zero-days under active attack, and defender triage stakes rise this week.

Phishing

Researchers Document “Forg365,” a Phishing-as-a-Service Platform Targeting Microsoft 365

A new named PhaaS platform targeting Microsoft 365 — defender teams review posture and OAuth-hygiene this week.

Flat white line-art of a calendar page beside a growing stack of update tiles — Microsoft Patch Tuesday and AI-driven discovery.

Patch Management

Microsoft Warns AI-Driven Vulnerability Discovery Will Mean Busier Patch Tuesdays

Patch Tuesdays get busier as AI drives vulnerability discovery — defender-team cadence review this week.

Flat white line-art of a telephone handset beside a login window — Okta warns of vishing targeting Microsoft 365 customers.

Phishing

Okta Warns of Vishing Campaign Targeting Microsoft 365 Customers

A vishing campaign against Microsoft 365 customers draws a vendor warning — defender review this week.

Flat white line-art of a shield with a closed padlock beside a wrench mid-turn — Microsoft RoguePlanet Defender patch.

Vulnerabilities

Microsoft Patches RoguePlanet Defender Flaw That Could Grant SYSTEM Privileges

The RoguePlanet Defender saga closes with Microsoft's patch — defender teams accelerate verification this week.

Flat white line-art of a large key beside a tall locked gate over a broad login panel — Huntress Azure CLI password-spray research.

Microsoft 365

Huntress Documents 81M+ Azure CLI Password-Spray Attempts Against 78 Microsoft Accounts

A scale-significant Azure CLI credential-attack campaign — defender teams stay in account-hardening posture this week.

Flat white line-art of a shield beside a key being swapped into a lock — Microsoft quantum-safe guidance aligning to the 2030 federal deadline.

Policy & Government

Microsoft Publishes Quantum-Safe Guidance as the Risk Timeline Shifts

Microsoft's PQC guidance lands alongside the accelerated federal deadline — vendor roadmap alignment this week.

Flat white line-art of a robotic agent head reading from a stack of instruction cards, one card flagged — Microsoft MCP tool-description poisoning research for

Artificial Intelligence (AI)

Microsoft Warns Poisoned MCP Tool Descriptions Can Turn AI Agents Into Data-Leak Channels

A fresh vendor-research disclosure at the intersection of AI agents and supply-chain risk — Microsoft says poisoned tool descriptions can quietly redirect what an agent does, and pairs the research with defender guidance for teams shipping agentic AI this week.

Flat white line-art of a shield with a single hammer above it — Microsoft Defender CVE-2026-33825 BlueHammer vulnerability.

Vulnerabilities

Microsoft Defender Flaw CVE-2026-33825, 'BlueHammer,' Tied to Ransomware Activity

Another Defender zero-day for defender teams to verify — patch cycle plus KEV watch this week.

See all