Weekly briefing

Week 40 · 28 Sep – 4 Oct 2026 UTC · assess the changes, then plan the next dates.

All dated changes in this period

60 source records · 32 groups

2 Oct 2026

Message CenterDefender2 source records

Message Center · Plan for change · 2 entries

MC1279093: (Updated) Microsoft Defender for Office 365: Enhancing how we handle promotional mail
Message Center · Plan for change
Microsoft Defender XDR
Assessment context
Microsoft marks it a major change
MC1486293: Microsoft Defender for Office 365: Changes to Unified RBAC permission mapping for Microsoft Entra Security Operator role
Message Center · Plan for change
Microsoft Defender XDR
Assessment context
Microsoft marks it a major change

2 Oct 2026

SecurityExchange

Microsoft Exchange Server Elevation of Privilege Vulnerability

Published vulnerability

CVE-2026-96940

Assessment context

Microsoft states that customer action is required

2 Oct 2026

SecurityGitLab

GitLab AI Gateway Critical Patch Release: 19.2.4, 19.3.2, and 19.4.1

Security advisory · GitLab patch releases

Assessment context

The vendor rates it critical

2 Oct 2026

SecurityCisco2 source records

Security news · 2 entries

Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability
Security news · Cisco security advisories
Cisco IOS XE Software Security Hardening Release: August 2026
Security news · Cisco security advisories

2 Oct 2026

SecurityPalo Alto Networks

CVE-2026-0250 GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway (Severity: MEDIUM)

Security news · Palo Alto Networks security advisories

1 Oct 2026

SecurityFortinet2 source records

Fortinet · exploited, added to CISA KEV · 2 entries

Fortinet FortiMail Path Traversal Vulnerability
Fortinet · exploited, added to CISA KEV
CVE-2026-104286
Assessment context
CISA lists it as exploited
Improper limitation of a pathname to a restricted directory
Security advisory · Fortinet PSIRT advisories
Assessment context
The vendor reports an exploit in the wild

1 Oct 2026

SecurityCloudflare

WAF - WAF Release - 2026-10-01 - Emergency

Security advisory · Cloudflare WAF changelog

Assessment context

Release notes name CVE-2026-88771

CVE-2026-88771

Oct 2026

Updates and guidanceDefender13 source records

Product news · 13 entries

Automatic enablement of SaaS accounts integration with Identity inventory
Product news · Microsoft Defender for Cloud Apps release notes
Automatic sensor v3.x activation and Windows auditing for existing customers
Product news · Microsoft Defender for Identity what's new
Cloud security plan management in the Defender portal
Product news · Microsoft Defender for Cloud release notes

Show the other 10 entries

Defender for Endpoint Linux 101.26091.0003
Product news · Defender for Endpoint Linux releases
Defender for Endpoint macOS 101.26082.0012
Product news · Defender for Endpoint macOS releases
Expanded server onboarding experience
Product news · Microsoft Defender for Cloud release notes
Expanding user reporting in Teams to include meetings
Product news · Microsoft Defender for Office 365 what's new
General availability of sensor v3.x activation without Defender for Endpoint
Product news · Microsoft Defender for Identity what's new
KSPM misconfiguration recommendations moving to controller-level scope (GA)
Product news · Microsoft Defender for Cloud release notes
New ApproverUpn field in the EmailPostDeliveryEvents table
Product news · Microsoft Defender for Office 365 what's new
New Defender for Identity security alerts
Product news · Microsoft Defender for Identity what's new
New Defender server security experience
Product news · Microsoft Defender for Cloud release notes
On-demand malware scanning now supports scanning specific blobs, files, containers, and file shares (GA)
Product news · Microsoft Defender for Cloud release notes

Oct 2026

Updates and guidanceSentinel

Detect use of vulnerable SAP BTP custom apps (Preview)

Product news · Microsoft Sentinel what's new

1 Oct 2026

SecurityCisco Talos Intelligence2 source records

Security news · 2 entries

Give yourself room to be human
Security news · Cisco Talos Intelligence
The Fine Art of Frustrating the Adversary
Security news · Cisco Talos Intelligence

1 Oct 2026

SecurityMicrosoft Edge

Edge 154.0.4258.53: Chromium security fixes

Security advisory · Microsoft Edge security release notes

1 Oct 2026

SecurityMicrosoft Security Blog2 source records

Security news · 2 entries

Insights from the 2026 Microsoft Digital Defense Report
Security news · Microsoft Security Blog
Preparing governments for an era of interconnected cyber risk
Security news · Microsoft Security Blog

30 Sep 2026

SecurityCisco

Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability

Cisco · exploited, added to CISA KEV

CVE-2026-76504

Assessment context

CISA lists it as exploited

30 Sep 2026

Message CenterDefender

MC1484018: Microsoft Defender for Identity auto-activation and auto-auditing automatic enablement

Message Center · Plan for change

Microsoft Defender XDR

Assessment context

Microsoft marks it a major change

30 Sep 2026

SecurityCloudflare

WAF - WAF Release - 2026-09-30

Security advisory · Cloudflare WAF changelog

Assessment context

Release notes name CVE-2026-85706

CVE-2026-85706

30 Sep 2026

Updates and guidanceDefender

Defender for Endpoint Android 1.0.9330.0101

Product news · Defender for Endpoint Android releases

30 Sep 2026

SecurityCisco Talos Intelligence

China-nexus UAT-11587 targets government and policy organizations across Asia with Antino backdoor

Security news · Cisco Talos Intelligence

30 Sep 2026

SecurityMicrosoft Security Blog2 source records

Security news · 2 entries

Unauthenticated command injection on internet-facing mail servers: tracking CVE-2026-73570
Security news · Microsoft Security Blog
Secure what’s next: Your guide to Microsoft Security at Microsoft Ignite 2026
Security news · Microsoft Security Blog

30 Sep 2026

SecuritySentinel

What’s new in Microsoft Sentinel: September 2026

Security news · Microsoft Sentinel Blog

29 Sep 2026

SecurityiOS and iPadOS / macOS

Apple Multiple Products Out-of-Bounds Write Vulnerability

Apple · exploited, added to CISA KEV

CVE-2026-86950

Assessment context

CISA lists it as exploited

29 Sep 2026

ReleasesMicrosoft 365 Apps

Microsoft 365 Apps for Enterprise 2512.zip

Revised by Microsoft · Microsoft Security Compliance Toolkit artifacts

Assessment context

Changed after ChangeIntel first saw it

29 Sep 2026

ReleasesMicrosoft Edge

Microsoft Edge v151 Security Baseline.zip

Revised by Microsoft · Microsoft Security Compliance Toolkit artifacts

Assessment context

Changed after ChangeIntel first saw it

29 Sep 2026

ReleasesMicrosoft Security Compliance Toolkit artifacts3 source records

Revised by Microsoft · 3 entries

LGPO.zip
Revised by Microsoft · Microsoft Security Compliance Toolkit artifacts
Assessment context
Changed after ChangeIntel first saw it
PolicyAnalyzer.zip
Revised by Microsoft · Microsoft Security Compliance Toolkit artifacts
Assessment context
Changed after ChangeIntel first saw it
SetObjectSecurity.zip
Revised by Microsoft · Microsoft Security Compliance Toolkit artifacts
Assessment context
Changed after ChangeIntel first saw it

29 Sep 2026

ReleasesWindows / Windows Server3 source records

Revised by Microsoft · 3 entries

Windows 10 Version 1607 and Windows Server 2016 Security Baseline.zip
Revised by Microsoft · Microsoft Security Compliance Toolkit artifacts
Assessment context
Changed after ChangeIntel first saw it
Windows 10 Version 1809 and Windows Server 2019 Security Baseline.zip
Revised by Microsoft · Microsoft Security Compliance Toolkit artifacts
Assessment context
Changed after ChangeIntel first saw it
Windows 10 Version 20H2 and Windows Server Version 20H2 Security Baseline.zip
Revised by Microsoft · Microsoft Security Compliance Toolkit artifacts
Assessment context
Changed after ChangeIntel first saw it

Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.