Vulnerabilities
Microsoft has patched a Microsoft 365 Copilot Enterprise Search vulnerability that researchers named “SearchLeak” — the fix is server-side, so defender Copilot-posture review and audit-log work is the practical follow-up.
Mobile Security
A single debug setting left enabled in Microsoft's Android Office apps — Word, Excel, PowerPoint, OneNote, Loop and Microsoft 365 Copilot — let any other app on the same device read Microsoft account tokens, per a SecurityWeek exclusive. Microsoft has patched the flaws.
Enterprise Infrastructure
Microsoft traced Universal Print share-creation failures to a Graph API code error that increased Entra ID directory replication latency and exposed a pre-existing race condition. Core printing was unaffected.
Crypto-Crime & Laundering
The disruption of the W3LL Panel dismantles a "full-service" cybercrime ecosystem that bypassed Multi-Factor Authentication (MFA) to target thousands of Microsoft 365 enterprise accounts. ATLANTA, GA — In a major blow to the "Phishing-as-a-Service" (PhaaS) industry, the FBI’s Atlanta Field Office
Trending
EvilTokens abuses the Microsoft 365 device code flow: the victim enters a legitimate code on Microsoft's own genuine sign-in page, which is why URL-checking advice fails. Huntress has documented more than 340 organizations affected across five countries since mid-February 2026.