Search
15 RESULTS
- Urgency level L3 Important NewsCybersecurity & Infrastructure
Microsoft advisory MO1550821: customers may be unable to connect to multiple Microsoft 365 services
Microsoft published admin center advisory MO1550821 confirming customers may be unable to connect to multiple Microsoft 365 services, including Exchange Online, Microsoft Teams, SharePoint Online, Microsoft 365 Copilot, and Microsoft Defender XDR. The advisory indicates a broad connectivity disruption; the provided evidence does not include technical cause, remediation steps, or confirmation of recovery.
- Urgency level L4 Major NewsAI & Technology
eMudhra appoints KPMG as independent reviewer, Microsoft removes seven certificates, Illumen reports about 30,800 issued under affected G3 hierarchies
eMudhra announced the appointment of KPMG as an independent external reviewer following the incident that led to distrust of select TLS intermediates. On October 26, Microsoft released an out-of-band Windows update that removes seven certificates associated with the affected hierarchies. An October 28 update cited by a security bulletin reports about 30,800 certificates were issued under the affected G3 hierarchies for a US customer ecosystem.
- Urgency level L4 Major NewsAI & Technology
Microsoft removes seven eMudhra-related certificates on Oct 26, 2026; WordPress 7.1.4 updates bundled root certificates
On October 26, 2026 Microsoft released an out-of-band Windows update that removes seven certificates associated with the affected eMudhra hierarchies from the Windows trust list. WordPress published release 7.1.4 which updates its bundled root certificates because of the eMudhra revocation. Administrators should apply vendor updates and inventory TLS certificates to determine whether any in-use certificates chain to the affected eMudhra roots and require migration.
- Urgency level L4 Major NewsAI & Technology
Microsoft removes seven eMudhra certificates on October 26, Google schedules Chrome/Android removal for October 27, eMudhra posts Oct 28 update
Microsoft released an out-of-band Windows update on October 26 that removes seven certificates associated with the affected eMudhra hierarchies. Google expects to release a Chrome Root Store removal for all affected devices Tuesday morning, October 27, 2026 PDT. eMudhra posted an update on October 28 saying customers are being moved to an alternate issuance pathway using its G1 RSA root. Operators should inventory certificate chains, apply vendor updates, and reissue affected certificates.
- Urgency level L2 DowngradedAI & Technology
eMudhra acknowledges researcher report of eight weak intermediate keys, Microsoft removes seven related certificates from Windows trust list
On October 17, 2026 an independent researcher reported that eight eMudhra Global TLS intermediate CA keys were cryptographically weak. eMudhra published an incident statement updated October 28 acknowledging the researcher report and saying its investigation is ongoing. On October 26 Microsoft released an out-of-band Windows update removing seven certificates associated with the affected hierarchies from the Windows trust list, including six eMudhra G3 roots and an AAA Certificate Services cross-sign.
- Urgency level L4 Major NewsAI & Technology
Google targets Oct 27, 2026 Chrome Root Store removal; Microsoft released out-of-band Windows update Oct 26 removing seven eMudhra certificates
Google said the Chrome Root Store removal is expected to be released Tuesday morning, October 27, 2026 (PDT). Microsoft released an out-of-band Windows update on October 26 that removes seven certificates associated with the affected eMudhra hierarchies from the Windows trust list. Operators should inventory whether their TLS chains chain to the removed eMudhra roots and, if so, plan reissuance or re-chaining to avoid trust failures on clients that receive these updates.
- Urgency level L4 Major NewsAI & Technology
Microsoft removes 7 eMudhra certificates from Windows trust (Oct 26); Chrome Root Store removal scheduled Oct 27, 2026 (PDT)
On Oct 26 Microsoft released an out‑of‑band Windows update that "removes seven certificates" ("six eMudhra G3 roots and an AAA Certificate Services cross‑sign") from the Windows trust list. Google’s Chrome Root Program previously stated that a root removal "is expected to be released ... on the Chrome Root Store Tuesday morning, October 27, 2026 PDT." These are material platform trust‑store changes that may cause TLS validation differences for clients when the updates reach them; operators should inventory affected certificate chains and monitor update rollouts.
- Urgency level L3 Important NewsAI & Technology
Microsoft expands Project Perception to supervise agentic insiders
Microsoft published official posts stating that Project Perception is intended to help organizations defend with agents and can supervise agentic activity in real time while providing traceability for practitioners to examine what happened and why risk emerged. The posts present a product-focused approach for treating agentic systems as operational/insider risks and for giving practitioners evidence to update security controls.
- Urgency level L2 DowngradedAI & Technology
Microsoft announces Maia 300 AI accelerator and plans multi-gigawatt deployments in 2027
Microsoft unveiled its Maia 300 custom AI inference system on October 12, 2026, and outlined multi-gigawatt deployments starting in 2027. The company claims 40% more tokens per megawatt than unspecified leading GPU systems; that comparison is not independently verified, and the planned deployment is not yet operational.
- Urgency level L3 Important NewsCorporate & Systemic Companies
US suspends Microsoft, Adobe and major IT outsourcers from PERM labor-certification processing
US officials announced that new and pending permanent labor certification applications involving Microsoft, Adobe and six major IT outsourcing firms would not be processed, while opening investigations into nine universities. The administration alleges abuse; those allegations are contested and are not established findings.
- Urgency level L3 Important NewsCorporate & Systemic Companies
US announces suspension of permanent-residency labor certification for Microsoft and other major IT employers
US Vice President JD Vance and Labor Secretary Keith Sonderling said the government is suspending Microsoft and several other major IT employers from a labor-certification program used in employment-based permanent residency, citing alleged fraud. Allegations are not adjudicated findings.
- Urgency level L3 Important NewsCybersecurity & Infrastructure
ConnectWise begins phased restoration of Cloud Backup (Trust Center update October 22, 2026 at 00:45 UTC)
ConnectWise posted a Trust Center update at 00:45 UTC on October 22, 2026 saying phased restoration of Cloud Backup is underway and will take several days; it warns partners that individual Microsoft 365 tenants still require review for unauthorized changes or persistent access. The advisory is an active remediation notice but does not, in the retrieved content, attribute the incident or confirm tenant data access.
- Urgency level L4 Major NewsCybersecurity & Infrastructure
ConnectWise: 'significant progress' restoring Cloud Backup access to 'more than several thousand MSPs' (ConnectWise Trust Center update Oct 20)
ConnectWise published a Trust Center update (Update: Monday, October 20, 2026 at 12:45 UTC) saying remediation, account resets, credential replacement and environment validation are underway. CRN quoted the ConnectWise CTO saying the company has made "significant progress" toward restoring Cloud Backup Microsoft 365 access to "more than several thousand MSPs." The advisories confirm ongoing remediation but do not specify how many MSPs have already had access fully restored or the timetable for completion.
- Urgency level L4 Major NewsCybersecurity & Infrastructure
ConnectWise Cloud Backup app abused — Huntress: sign‑in activity in almost 1,000 Entra tenants (300+ successes); ConnectWise disabled seven app identities (07:00 UTC, 17 Oct 2026); security.io reports certificate revocations
Huntress reported on 17 Oct 2026 that almost 1,000 Microsoft Entra tenants had sign‑in activity from IP 144.172.64[.]128, with 'more than 300' successful sign‑ins. ConnectWise states it disabled seven ConnectWise application identities at 07:00 UTC on October 17, 2026; security.io reports that affected certificates were revoked. These items indicate large‑scale sign‑in activity and vendor containment actions now posted publicly.
- Urgency level L4 Major NewsCybersecurity & Infrastructure
Huntress: almost 1,000 Entra tenants had sign‑in activity from 144.172.64[.]128; over 300 sign‑ins succeeded
Huntress reported that almost 1,000 Microsoft Entra tenants showed sign-in activity from IP address `144.172.64[.]128`, and that over 300 of those sign-ins succeeded. The finding indicates large-scale unauthorized sign-in activity observable to that investigator; vendor confirmation, exact dates/timeline, and whether data loss occurred are not confirmed in the retrieved source.