38 articles
Security changes, vulnerabilities and practical resilience without turning every update into panic or theatre.
Microsoft has marked two SharePoint Server vulnerabilities as actively exploited. Organisations with internet-facing or previously exposed farms should patch to current builds, preserve evidence and assess whether attackers gained access before remediation.
Ransomware recovery now depends on regaining clean control of email and identity. Compare rapid account restoration, tenant-wide clean-up and staged rebuilds across Microsoft 365, Google Workspace and connected SaaS applications.
Mirage2FA phishing infrastructure shows how criminals can relay a genuine Microsoft 365 sign-in, capture the resulting session and retain access after MFA. Defending against it requires phishing-resistant authentication and stronger session controls.
Criminals have obtained contact details from several Jersey organisations and are using trusted local names in phishing messages. The immediate challenge is protecting customers from follow-on credential theft, fraud and convincing impersonation attempts.
Broadcom’s VMSA-2026-0006.2 adds vSphere 7.0 guidance for two unauthenticated, network-reachable vCenter flaws rated 9.8. With no workaround available, restrict access and use the supported patch route as an emergency change.
A newer Microsoft Defender security intelligence update appears to restore failed scans on affected Windows PCs, highlighting why rapidly delivered endpoint-protection updates need monitoring, staged deployment and clear recovery procedures.
Jersey’s Telecommunications Security Framework has moved from consultation to enforceable obligations, with security duties in the 2002 law, a 2026 Security Measures Order and a Code of Practice. For operators and enterprise buyers, the issue is now assurance, procurement and resilience planning.
Microsoft’s new time-based immutability for Azure SQL Database long-term retention backups makes them non-modifiable and non-erasable during the immutability period. That strengthens the trustworthiness of recovery points, but teams still need recovery discipline and tested restores—especially for Managed Instance.
