COMPANY COVERAGE
Microsoft’s technology portfolio includes enterprise software, cloud infrastructure and AI products. Explore our coverage of data permissions, AI partnerships and the systems that connect workplace information.
Cyberwarfare / News analysis
New research traces how an exposed collaboration server can become a route to disabled defenses and ransomware across a domain. The warning reaches beyond the initial patch.
Software / News analysis
The rollout changes token shape while retaining permissions and expiry. Systems that assumed a 40-character secret now need to handle a much longer opaque value.
Software / News analysis
Security integrations can read and update ordinary advisory comments in public preview. Confidential discussion and deletion remain outside the new endpoints.
Cybersecurity / News analysis
Maintainers can now hold restricted discussions without moving them to another system. The feature makes current repository permissions part of the disclosure workflow.
Cybersecurity / News analysis
CVE identifiers, source locations and separate review dates are now available directly through GraphQL. A richer feed still needs a clear rule for prioritizing local exposure.
Artificial Intelligence / News analysis
REST and GraphQL review requests give teams more control over automation. Review value still depends on which findings improve the code and how much checking they require.
Cyberwarfare / News analysis
Cisco Talos describes a Windows backdoor using Outlook and OneDrive for command traffic. The report makes endpoint context essential to interpreting trusted cloud destinations.
Companies / News analysis
The leadership update changes oversight across Microsoft 365 and LinkedIn. Its effects on products will need to be judged through later decisions.
Software / News analysis
Checks and statuses now follow Actions retention settings. Teams need to decide which release evidence must survive after routine platform records expire.
Software / News analysis
Programmatic merges can now return a request to monitor. Release automation needs to distinguish accepted work from a completed merge.
Cybersecurity / News analysis
Structured private reports ask for impact and a proof of concept, bringing the cost of checking a claim closer to the start of the process.
Cybersecurity / News analysis
Initial setup still produces findings, but weekly scans now wait for development-triggered analysis. Fleet owners should read scan coverage and repository activity separately.
