Weekly briefing

Week 18 · 28 Apr – 4 May 2025 UTC · assess the changes, then plan the next dates.

What to assess first

28 Apr – 4 May · dates to 3 Jun Check coverage

Act on1

May2025
Known issueMay 2025
[INVESTIGATING] Text predictions unexpectedly become unavailable and are missing in Outlook options
Classic Outlook known issues

Coming up7

8May
CISA KEV deadlineDue 8 May 2025
Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability
CVE-2025-24054
13May
Patch TuesdayScheduled for 13 May 2025
Patch Tuesday, 13 May 2025
The second Tuesday of the month, when Microsoft releases security updates for Windows, Office, and servers.
26May
Message Center action dateDue 26 May 2025
MC1064044: Limited Microsoft Planner Functionality for Shared Mailbox UsersMicrosoft 365 Message Center Archive by Merill Fernando
1Jun
Message Center action dateDue 1 Jun 2025
MC1036575: Microsoft Viva Engage: External Networks are being modernizedMicrosoft 365 Message Center Archive by Merill Fernando
3Jun
CISA KEV deadlineDue 3 Jun 2025
Microsoft Windows Scripting Engine Type Confusion Vulnerability
CVE-2025-30397
Same day: CISA KEV deadline: Microsoft Windows DWM Core Library Use-After-Free Vulnerability; CISA KEV deadline: Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability; CISA KEV deadline: Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability; CISA KEV deadline: Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
1May
Message Center action dateDue 1 May 2025
MC1060467: Action Required - Microsoft Defender for Cloud Apps Network Configurations ChangesMicrosoft 365 Message Center Archive by Merill Fernando
29Apr
CISA KEV deadlineDue 29 Apr 2025
Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability
CVE-2025-29824
Same day: Message Center action date: MC1048530: Take Action by April 29, 2025 - Microsoft Defender for Cloud Apps Network Configuration; Message Center action date: MC976821: Microsoft Search: The old Search usage reports will retire

Changed2

2May
Release2 May 2025
Release 2025-04-27
Azure Kubernetes Service release notes
Related evidence (3)
- Release 2025-04-06
  Public source · Shared CVE CVE-2025-0426
- Release 2025-03-16
  Public source · Shared CVE CVE-2025-0395
- Release 2025-02-20
  Public source · Shared CVE CVE-2024-9042
30Apr
Revised30 Apr 2025
MC1060467: Action Required - Microsoft Defender for Cloud Apps Network Configurations ChangesMicrosoft 365 Message Center Archive by Merill Fernando
Microsoft Defender XDR

How this list is chosen

Changes from 28 Apr 2025 – 4 May 2025 UTC and dates due up to 3 Jun 2025. Dates are the source's own, or labelled as the day ChangeIntel observed a change; never inferred effective dates.

Ranked by kind: exploited vulnerabilities, then up to 7 dates, open known issues, and other notable changes, with at most one entry per feed. Service incidents are on the status board; security baseline downloads, first captures of a document, and metadata-only documentation checks are left out. This is a view of retained evidence, not a reconstruction of everything known at the time.

The briefing is selective. Browse every dated change, review upcoming dates or check the period's coverage.