Microsoft 365
Stories from Microsoft 365 come first, newest first, then stories from connected topics (Snowflake, cloud security, supply chain attack, Microsoft, phishing, Hub: Ransomware & Cyber Attacks), each labelled with where it comes from. This view is not indexed by search engines.
Microsoft Plans AI Phishing Detection in Teams From November
Microsoft says Teams will use AI to flag phishing on external first-contact chats from early November, with worldwide availability planned for December.
Just in
Latest
Muji Says App Breach May Have Exposed Up to 27.26m Customer Records
Muji app breach: Ryohin Keikaku says up to 27.26m records with email, date of birth and gender may have leaked. No cards, names or addresses were in them.
Drupal Warns Highly Critical Commerce Core Flaw Is Being Exploited
A highly critical Drupal Commerce access bypass, CVE-2026-118539, is being exploited. Update Commerce Core to 3.3.13 or 8.x-2.41 and audit orders.
Cursor Says Tampered Claude Code Extension Reached Up to 5,000 Users
A tampered Claude Code extension sat in Cursor's marketplace for about 11 hours on 29 October, reaching up to 5,000 users. How to check and clean up.
TeamViewer Fixes a Flaw That Lets a Remote Host Attack the Viewer
A TeamViewer vulnerability lets a malicious remote host attack the person connecting to it. Version 15.83 fixes it, and no exploitation is known.
ESET Says a Belarus-Aligned Group Deployed a Wiper at a Ukrainian Firm
ESET APT Activity Report: a Belarus-aligned group ran its first documented wiper attack, on a Ukrainian manufacturer, as Iran-aligned groups return.
Trezor Warns CryptoBilis Buyers to Move Funds After Implant Report
Trezor tells anyone who bought a Trezor from CryptoBilis since March 2026 to move funds to a new seed, after a reported implant it treats as credible.
Binance Says It Will Cover All Losses From a $6.3bn Hack; $3bn Frozen
Binance estimates a security incident's impact at about $6.3bn and says it will cover all losses. About $3bn is frozen on-chain; withdrawals stay paused.
Talos Says Hackers Used 10.0-Rated Cisco SD-WAN Flaw to Plant KeyDrift
Cisco Talos says UAT-11473 exploited CVE-2026-20127 in Catalyst SD-WAN to plant KeyDrift, malware built to steal keys. Fixes date from February.
Polymarket Halts Trading, Says a Third-Party Provider Was Compromised
Polymarket put its international exchange into cancel-only mode on 29 October, saying a third-party provider was compromised and users would be made whole.
Four Publishing Groups Urge Court to Reject OpenAI’s Fair-Use Defence
AAP, STM, IBPA and CCC have filed an amicus brief backing authors and news groups against OpenAI and Microsoft. It argues; it does not decide.
Latest on TSN
Explore the TSN Atlas: Every topic we cover, mapped. Click a bubble to dive in.