other
Microsoft's cloud productivity suite, including Office apps, Teams, Exchange/Outlook mail, and SharePoint, used by businesses and consumers.
No evidence-backed relationships are recorded.
Huntress found legitimate remote management software abused in 45% of the endpoint incidents it logged in the first quarter of 2026. A rogue copy can behave like IT's approved one, so defenders have to know which tools are sanctioned and how each install arrived.
Reality
Proofpoint says China-aligned TA419 has posed as a former White House official and an Anthropic employee to phish AI policy experts since at least April 2025. The first approach asks for nothing; the credential-stealing link follows only after a target replies.
Perspective Coverage
7 publishersReality
Ryan Roslansky, who took LinkedIn from 700 million to 1.3 billion members, will leave Microsoft at the end of 2026, citing his family's ties to the Bay Area. Nadella will split the Microsoft 365 and Copilot role among executives already in place.
Perspective Coverage
4 publishersReality
Cisco Talos links China-nexus UAT-11587 to 16 affected or targeted institutions in eight Asian countries, via a backdoor run through Microsoft 365. Its commands move through Outlook and OneDrive via Microsoft Graph, so defenders have no command server to block.
Perspective Coverage
3 publishersReality
Ryan Roslansky, Microsoft's Office and Teams chief, is leaving after nearly 18 years, a week after the company announced its new Copilot. His teams now report to Charles Lamanna in the Copilot, Agents, and Platform organization, so Office is run from inside Microsoft's Copilot group.
Perspective Coverage
4 publishersReality
ANY.RUN tied 351 sandbox analyses to CSuite, a phishing operation that steals Microsoft 365 sessions or installs ScreenConnect or Action1 for remote access. Resetting credentials leaves the remote-access half of an intrusion in place.
Reality
Thomson Reuters retired Hosted Exchange for Virtual Office CS on Aug. 31, 2026, so firms running Office there now need their own Microsoft 365 licenses. Whether they then move to a managed cloud host depends more on the software they run outside the CS suite than on the new email bill.
Reality
Arctic Wolf says the cluster it tracks as PREY-0058 deploys no malware at all. A call from fake IT leads to a proxied login page, and the stolen session token comes back from inside the victim's own ASN.
Perspective Coverage
3 publishersReality
CloudSEK took administrator access to the panel and counted 5,137 stolen records coming off 42 VPS nodes into five leasing affiliates' Telegram bots, with the phishing pages dark for three weeks while the panel itself stays reachable.
Perspective Coverage
3 publishersReality
Microsoft made Copilot a Microsoft 365 workspace with three new experiences, Home, Code and Autopilot, while keeping its assistants inside Word and Excel. Admins now train staff on two entry points and have to decide who may point Code's no-code apps at live business data.
Reality
Microsoft put Copilot Managed Runtime into public preview, hosting code from three Copilot builders and third-party tools like Lovable inside the M365 tenant. For security teams the launch is a policy job over who may deploy code that reads tenant data.
Reality
Microsoft's unified Copilot app adds Code and Autopilot tabs for Microsoft 365 customers, with usage-based billing under a cost model still called 'evolving'. Firms deep in Microsoft 365 get AI that works inside their own tenant, on a bill they cannot yet forecast.
Reality
Proofpoint says an unknown actor sprayed over 5,700 M365 accounts in Chile and breached only seven, all dormant service accounts at one retailer. Employee logins held, and those seven unused accounts still gave the attacker mail, Teams chats, OneDrive files and, in one case, the Azure portal.
Reality
ShareGate surveyed nearly 1800 IT professionals across nine countries and found 77% had a Microsoft 365 governance incident last year, with full Copilot deployments doubling to 56% of organisations over the same period.
Reality
Proofpoint tracked three waves of TeamFiltration password spraying against Microsoft 365 tenants in Chile between July 21 and August 16. The seven accounts that opened were all functional identities carrying provisioned passwords with no MFA.
Reality
Island says the adversary-in-the-middle service runs on at least 755 domains against hundreds of organizations. The session it steals arrives after an authentication the identity provider records as entirely normal.
Reality
Calendar, People and Files stop working on December 16, 2026, and Microsoft has already stopped shipping them, leaving a removal job on fleets that took the apps automatically at the end of 2025.
Reality
A Gartner survey found 87% of employees thought an algorithm could judge them more fairly than their manager. The tools large employers deployed draft and edit the review instead, so the governance question is authorship.
Reality
eSentire says a phishing kit called GhostCode used Microsoft's device-code flow to register three devices within 77 seconds of a victim completing MFA, and one of them stayed enrolled in Intune until it was explicitly removed.
Reality
Anthropic says people could not tell whether a task belonged in chat or in Cowork, so it deleted the choice. The document and deck editors arriving with the merge are beta, limited to paid plans, and built to export.
Perspective Coverage
10 publishersReality
Leadership · September 16, 2026 · 1 publisher
Security · September 15, 2026 · 1 publisher
Leadership · September 13, 2026 · 1 publisher
Leadership · September 13, 2026 · 1 publisher
Security · September 11, 2026 · 1 publisher
Build · September 11, 2026 · 1 publisher
Security · September 11, 2026 · 1 publisher
Security · September 11, 2026 · 1 publisher
Invest · September 10, 2026 · 1 publisher
Security · September 10, 2026 · 1 publisher
Leadership · September 10, 2026 · 1 publisher
Security · September 10, 2026 · 1 publisher
Build · September 8, 2026 · 1 publisher
Security · September 4, 2026 · 1 publisher
Security · September 4, 2026 · 1 publisher
Security · September 2, 2026 · 1 publisher
Security · September 1, 2026 · 1 publisher
Product · August 31, 2026 · 1 publisher
Product · August 30, 2026 · 1 publisher
Security · August 28, 2026 · 1 publisher
Build · August 27, 2026 · 1 publisher
Security · August 26, 2026 · 2 publishers
Security · August 25, 2026 · 1 publisher
Product · August 25, 2026 · 1 publisher
Build · August 24, 2026 · 1 publisher
Leadership · August 22, 2026 · 1 publisher
Build · August 22, 2026 · 1 publisher
Product · August 21, 2026 · 2 publishers
Leadership · August 21, 2026 · 1 publisher
Build · August 21, 2026 · 1 publisher
Security · August 21, 2026 · 1 publisher
Security · August 20, 2026 · 1 publisher
Leadership · August 19, 2026 · 1 publisher
Leadership · August 19, 2026 · 1 publisher
Security · August 18, 2026 · 1 publisher
Build · August 15, 2026 · 1 publisher