All done at Live 360! Tech Con
Community post · Out of Office Hours (Michael Niehaus)
Weekly briefing
Week 47 · 18 Nov – 24 Nov 2024 UTC · assess the changes, then plan the next dates.
All dated changes in this period
22 source records · 15 groupsRoadmapMicrosoft 365 Roadmap2 source records
Roadmap entry · 2 entries
- Microsoft 365 admin center: Google Groups to M365 Modern Groups Migration Service
Roadmap entry · Microsoft 365 Roadmap
- Microsoft 365 admin center: Unified Google Workspace Migration
Roadmap entry · Microsoft 365 Roadmap
RoadmapMicrosoft Entra
Microsoft 365 admin center: Google to Entra Identity Sync service
Roadmap entry · Microsoft 365 Roadmap
SecurityiOS and iPadOS / macOS2 source records
Apple · exploited, added to CISA KEV · 2 entries
- Apple Multiple Products Code Execution Vulnerability
Apple · exploited, added to CISA KEV
CVE-2024-44308
Assessment context
CISA lists it as exploited
- Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability
Apple · exploited, added to CISA KEV
CVE-2024-44309
Assessment context
CISA lists it as exploited
ReleasesGitLab
GitLab 17.6
Tool release · GitLab monthly releases
ReleasesMicrosoft Graph PowerShell SDK
Microsoft Graph PowerShell SDK 2.25.0
Tool release · Microsoft Graph PowerShell SDK release notes
Assessment context
5 release-note bullets
- Adds Beta Cmdlets for paths under the directory.publicKeyInfrastructureRoot tag in https://github.com/microsoftgraph/msgraph-sdk-powershell/pull/3031
- [v2] Examples Update in https://github.com/microsoftgraph/msgraph-sdk-powershell/pull/3028
- Updates wrong Connect-MgBetaGraph to Connect-MgGraph in https://github.com/microsoftgraph/msgraph-sdk-powershell/pull/3002
SecurityVMware vCenter Server2 source records
VMware · exploited, added to CISA KEV · 2 entries
- VMware vCenter Server Heap-Based Buffer Overflow Vulnerability
VMware · exploited, added to CISA KEV
CVE-2024-38812
Assessment context
CISA lists it as exploited
- VMware vCenter Server Privilege Escalation Vulnerability
VMware · exploited, added to CISA KEV
CVE-2024-38813
Assessment context
CISA lists it as exploited
ReleasesGPOZaurr2 source records
Tool release · 2 entries
- GPOZaurr 1.1.7
Tool release · GPOZaurr package releases
- GPOZaurr 1.1.8
Tool release · GPOZaurr package releases
RoadmapMicrosoft 365 Copilot / OneDrive2 source records
Roadmap entry · 2 entries
- OneDrive: Convert Copilot response into a Word file
Roadmap entry · Microsoft 365 Roadmap
- OneDrive: Create a presentation from a Word file
Roadmap entry · Microsoft 365 Roadmap
Updates and guidanceWindows Server
How to preview: Azure Arc-connected Hotpatching for Windows Server 2025
Windows news · Windows Server Blog
ReleasesAzure CLI
RoadmapTeams
Microsoft Teams: EDU tenant type selection in policy wizard
Roadmap entry · Microsoft 365 Roadmap
SecurityPalo Alto Networks2 source records
Palo Alto Networks · exploited, added to CISA KEV · 2 entries
- Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability
Palo Alto Networks · exploited, added to CISA KEV
CVE-2024-0012
Assessment context
CISA lists it as exploited, including by ransomware
- Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability
Palo Alto Networks · exploited, added to CISA KEV
CVE-2024-9474
Assessment context
CISA lists it as exploited, including by ransomware
Updates and guidanceGlobal Secure Access
Global Secure Access macOS client 1.1.584
Product news · Global Secure Access macOS client releases
SecurityOracle Database / Oracle E-Business Suite / Oracle Java / Oracle WebLogic Server2 source records
Security advisory · 2 entries
- Oracle Security Alert CVE-2024-21287
Security advisory · Oracle security alert directory
- Oracle Security Alert for CVE-2024-21287 - 18 November 2024
Security news · Oracle Security Alerts
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.