Weekly briefing

Week 39 · 26 Sep – 2 Oct 2022 UTC · assess the changes, then plan the next dates.

All dated changes in this period

6 source records · 3 groups

Oct 2022

Updates and guidanceDefender3 source records

Product news · 3 entries

Automated Investigations email cluster action deduplication: We added more checks.
Product news · Microsoft Defender for Office 365 what's new
Enhancement in URL click alerts
Product news · Microsoft Defender for Office 365 what's new
Manage allows and blocks in the Tenant Allow/Block List: With allow expiry management (currently in Private Preview), if Microsoft hasn't learned from the allow, Microso…
Product news · Microsoft Defender for Office 365 what's new

30 Sep 2022

SecurityAtlassian Jira and Confluence

Atlassian Bitbucket Server and Data Center Command Injection Vulnerability

Atlassian · exploited, added to CISA KEV

CVE-2022-36804

Assessment context

CISA lists it as exploited

30 Sep 2022

SecurityExchange2 source records

Added to CISA KEV · 2 entries

Microsoft Exchange Server Remote Code Execution Vulnerability
Added to CISA KEV
CVE-2022-41082
Assessment context
CISA lists it as exploited
Microsoft Exchange Server Server-Side Request Forgery Vulnerability
Added to CISA KEV
CVE-2022-41040
Assessment context
CISA lists it as exploited

Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.