Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources, documents or advisories need attention: 272/272 feeds/APIs · 469/469 docs · 8/9 advisories · checked 13:41 UTC Customize Public modeDiscuss ChangeIntel on Discord

Weekly briefing

Week 22 · 26 May – 1 Jun 2025 UTC · assess the changes, then plan the next dates.

What to assess first

26 May – 1 Jun · dates to 1 Jul Check coverage

Coming up7

  1. CISA KEV deadlineDue 3 Jun 2025

    Microsoft Windows Scripting Engine Type Confusion Vulnerability

    CVE-2025-30397

    Same day: CISA KEV deadline: Microsoft Windows DWM Core Library Use-After-Free Vulnerability; CISA KEV deadline: Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability; CISA KEV deadline: Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability; CISA KEV deadline: Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability

  2. Patch TuesdayScheduled for 10 Jun 2025

    Patch Tuesday, 10 June 2025

    The second Tuesday of the month, when Microsoft releases security updates for Windows, Office, and servers.

  3. Message Center action dateDue 30 Jun 2025

    MC1042929: Prevent/Fix - Microsoft Purview: HR Connector new sample power shell scriptMicrosoft 365 Message Center Archive by Merill Fernando

    Same day: Message Center action date: MC1059667: Action required: Classic Microsoft Teams end of availability starts July 1, 2025; Message Center action date: MC1085569: Microsoft Teams: Upgrade to Meeting Recording Organizer Policy by 30 June 2025; Message Center action date: MC1089315: Resharing to external users required after enabling Microsoft SharePoint integration with Microsoft Entra B2B

  4. CISA KEV deadlineDue 1 Jul 2025

    Microsoft Windows External Control of File Name or Path Vulnerability

    CVE-2025-33053

How this list is chosen

Changes from 26 May 2025 – 1 Jun 2025 UTC and dates due up to 1 Jul 2025. Dates are the source's own, or labelled as the day ChangeIntel observed a change; never inferred effective dates.

Ranked by kind: exploited vulnerabilities, then up to 7 dates, open known issues, and other notable changes, with at most one entry per feed. Service incidents are on the status board; security baseline downloads, first captures of a document, and metadata-only documentation checks are left out. This is a view of retained evidence, not a reconstruction of everything known at the time.

The briefing is selective. Browse every dated change, review upcoming dates or check the period's coverage.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 26 Oct 13:41 UTC · 272 of 272 readable · 270 fully read · documentation 469/469 current