23 articles
Security changes, vulnerabilities and practical resilience without turning every update into panic or theatre.
Ransomware exploitation of SharePoint flaws has sharpened the case for removing public access to on-premises farms. With SharePoint Server 2016 and 2019 unsupported, organisations must investigate historic compromise and choose migration, Subscription Edition or retirement.
Microsoft will make passkeys the default sign-in method in Entra ID from 1 September 2026 and retire Microsoft-provided SMS and voice delivery on 1 February 2027. The key risk is strand-through: recovery and helpdesk flows that still assume telecom MFA.
Jersey’s Cyber Security Law takes effect in two stages: the JCSC gains statutory functions on 1 September, while OES security duties and 24-hour incident reporting begin on 1 December. Potential operators should use the gap to establish scope and response readiness.
Time-based backup immutability is now available for Azure SQL Database LTR backups: once the policy is enabled and locked, protected backups can’t be deleted or modified until the retention window ends. But it only covers backups created after the lock.
Microsoft lists CVE-2026-58644 as exploited in the wild. SharePoint Server operators should verify every farm meets the June fixed-build threshold, install the latest August cumulative updates and assess any previously exposed unpatched host for compromise.
Microsoft has marked two SharePoint Server vulnerabilities as actively exploited. Organisations with internet-facing or previously exposed farms should patch to current builds, preserve evidence and assess whether attackers gained access before remediation.
Ransomware recovery now depends on regaining clean control of email and identity. Compare rapid account restoration, tenant-wide clean-up and staged rebuilds across Microsoft 365, Google Workspace and connected SaaS applications.
Mirage2FA phishing infrastructure shows how criminals can relay a genuine Microsoft 365 sign-in, capture the resulting session and retain access after MFA. Defending against it requires phishing-resistant authentication and stronger session controls.
Criminals have obtained contact details from several Jersey organisations and are using trusted local names in phishing messages. The immediate challenge is protecting customers from follow-on credential theft, fraud and convincing impersonation attempts.
Broadcom’s VMSA-2026-0006.2 adds vSphere 7.0 guidance for two unauthenticated, network-reachable vCenter flaws rated 9.8. With no workaround available, restrict access and use the supported patch route as an emergency change.
