Edge 140.0.3485.54: Chromium security fixes and 1 Edge-specific fix
Security advisory · Microsoft Edge security release notes
Weekly briefing
Week 36 · 1 Sep – 7 Sep 2025 UTC · assess the changes, then plan the next dates.
All dated changes in this period
21 source records · 13 groupsSecurityAndroid
Android Runtime Use-After-Free Vulnerability
Android · exploited, added to CISA KEV
CVE-2025-48543
Assessment context
CISA lists it as exploited
SecurityCloudflare
WAF - WAF Release - 2025-09-04 - Emergency
Security advisory · Cloudflare WAF changelog
Assessment context
Release notes name CVE-2025-53690, CVE-2025-53691, CVE-2025-53693
CVE-2025-53690CVE-2025-53691CVE-2025-53693
Updates and guidanceDefender2 source records
Product news · 2 entries
- Defender for Endpoint Android 1.0.8102.0101
Product news · Defender for Endpoint Android releases
- Defender for Endpoint iOS 1.1.68200103 (release notes mention Global Secure Access)
Product news · Defender for Endpoint iOS releases
Message CenterDefender
MC1147387: Microsoft Defender for Office 365: Alert experience enhancements for faster triage
Message Center · Stay informed · Microsoft 365 Message Center Archive by Merill Fernando
Microsoft Defender XDR
Message CenterDefender
MC1146813: Retirement of "Add to existing remediation" option in Microsoft Defender for Office 365
Message Center · Stay informed · Microsoft 365 Message Center Archive by Merill Fernando
Microsoft Defender XDR
Assessment context
Microsoft marks it a major change
SecurityMicrosoft 365 Apps
Microsoft Office Excel Remote Code Execution Vulnerability
CISA KEV deadline
CVE-2007-0671
Assessment context
CISA deadline passed 420 days ago
SecurityMicrosoft Internet Explorer Resource Management Errors Vulnerability
Microsoft Internet Explorer Resource Management Errors Vulnerability
CISA KEV deadline
CVE-2013-3893
Assessment context
CISA deadline passed 420 days ago
SecurityCloudflare
WAF - WAF Release - 2025-09-01
Security advisory · Cloudflare WAF changelog
Assessment context
Release notes name CVE-2025-52970
CVE-2025-52970
Updates and guidanceDefender / Sentinel
(Preview) Investigate incidents by using Blast radius analysis, which is an advanced graph visualization built on the Microsoft Sentinel data lake and graph infrastructu…
Product news · Microsoft Defender XDR what's new
Updates and guidanceDefender / Teams
Users can report external and intra-org Microsoft Teams messages as non-malicious (not a security risk) from the following locations: Chats Standard, shared, and private…
Product news · Microsoft Defender for Office 365 what's new
Updates and guidanceDefender7 source records
Product news · 7 entries
- (Preview) In advanced hunting, you can now hunt by using the hunting graph, which renders predefined threat scenarios as interactive graphs.
Product news · Microsoft Defender XDR what's new
- (Preview) Use tasks in the Microsoft Defender portal to break down incident investigations into actionable steps and assign them across your operations teams.
Product news · Microsoft Defender XDR what's new
- Defender for Endpoint Linux 101.25072.0003
Product news · Defender for Endpoint Linux releases
Show the other 4 entries
- Defender for Endpoint Linux 101.25082.0003
Product news · Defender for Endpoint Linux releases
- Defender for Endpoint Windows 10.8804
Product news · Defender for Endpoint Windows releases
- Defender for Endpoint macOS 101.25072.0011
Product news · Defender for Endpoint macOS releases
- Near real-time URL protection in Teams messages
Product news · Microsoft Defender for Office 365 what's new
Updates and guidanceSentinel2 source records
Product news · 2 entries
- Microsoft Sentinel is evolving into a SIEM and platform
Product news · Microsoft Sentinel what's new
- New data sources for enhanced User and Entity Behavior Analytics (UEBA) (Preview)
Product news · Microsoft Sentinel what's new
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.