Your Security Digest · 01 aug

Today, 35 things to read.

11 critical · 24 to skim · nothing on fire

Data source: supabase

tracked35

critical11

active exploit0

35 incidents · Microsoftupdated live

Jul 303d ago

…

highransomware

Microsoft Teams vishing attacks lead to Chaos ransomware attacks

Threat actors are impersonating IT support staff in Microsoft Teams calls to gain remote access to corporate devices and deploy Chaos ransomware in attacks targeting North American organizations.

aeo—social0 · flat

Jul 294d ago

…

criticalzero-day

Russian hackers exploit Exchange OWA zero-day for long-term mailbox access

The Russian state-sponsored hacking group Laundry Bear, also known as Void Blizzard, is exploiting an Exchange Outlook Web Access vulnerability in email campaigns to deliver a sophisticated backdoor called

aeo—social0 · flat

Today, 35 things to read.

Microsoft Teams vishing attacks lead to Chaos ransomware attacks

Russian hackers exploit Exchange OWA zero-day for long-term mailbox access

Windows 11 KB5101684 update released with 42 changes and fixes

Shadow AI agents are multiplying. Here's how to find and secure them.

Hackers hijack hotel Wi-Fi DNS to steal Microsoft 365 accounts

Microsoft blames massive Microsoft 365 outage on maintenance bug

Microsoft 365 outage affects Teams, SharePoint and other services

Microsoft working to fix Exchange Online mailbox quarantine issue

Microsoft to stop Exchange 2016 / 2019 security updates in October

How enterprise GenAI can amplify ransomware risk — and how to contain it

Critical SharePoint RCE flaw exploited to steal machine keys

Microsoft shares manual fix for WSUS sync delays and timeouts

New HollowGraph malware uses Microsoft Graph for stealthy C2 comms

Microsoft confirms Windows Server Update Services sync delays

Windows KB5121767 OOB update fixes shutdowns on some Dell PCs

Microsoft warns of surge in ACR Stealer attacks on customers

Windows Server 2022 reach end of mainstream support in 90 days

Windows 11 24H2 Home and Pro reach end of support in 90 days

Microsoft: Some Dell PCs shut down after recent Windows updates

Microsoft Patches a Record 570 Security Flaws

Microsoft releases Windows 10 KB5099539 extended security update

Microsoft July 2026 Patch Tuesday fixes massive 570 flaws, 3 zero-days

Windows 11 KB5101650 & KB5099414 cumulative updates released

Microsoft Entra ID gets passkeys default authentication starting September

New phishing kits target Microsoft 365 accounts, evade MFA

Microsoft starts testing cleaner Windows Search without ads

Microsoft expects more Windows security updates from AI-discovered flaws

Microsoft to retire the OWA Light client in Exchange Server

Microsoft patches RoguePlanet Defender zero-day vulnerability

New Forg365 phishing platform uses AI to target Microsoft 365 accounts

Entra passkey enrollment vishing targets Microsoft 365 users

Microsoft to enable Windows settings backup by default for orgs

Microsoft testing new Cloud Rebuild Windows 11 recovery feature

Fake IT support calls on Microsoft Teams push EtherRAT malware

ARToken PhaaS exposes EvilTokens' Microsoft 365 phishing toolkit