A Reddit user known as Meta4X has decommissioned a self-hosted Microsoft Exchange installation that began with Exchange 5.5 on Windows NT 4 in 1999, replacing its final role as a network alert relay with Postfix on Ubuntu Server LTS. The user had already migrated mailboxes and email delivery to Microsoft 365 a couple of years earlier, keeping Exchange around only for internal alerting. Over the decades the setup was upgraded through Exchange 2000, 2003, 2007, 2010, 2013, 2016 and 2019.
tomshardware.com
· 2026-11-07
Microsoft reported $92.3 billion in revenue, up 19% year-over-year, marking its tenth consecutive record quarter. Net income rose 32% to $36.6 billion, driven largely by Microsoft Cloud revenue of $63.9 billion, with Azure contributing $33.2 billion and $10 billion specifically tied to OpenAI. Capital expenditures hit a record $45.2 billion, while Devices and Consumer revenue fell 3%.
techcrunch.com
· 2026-10-28
Cybersecurity firm Huntress published its 'Tragic Quadrant,' a ranked list of attack tactics most frequently hitting small and mid-sized businesses. The data shows remote monitoring and management (RMM) tool abuse accounted for 45% of endpoint incidents in Q1 2026, mailbox manipulation made up 24.6% of identity threat signals so far in 2026, and adversary-in-the-middle attacks that bypass multi-factor authentication represented 18.9% of identity-based threats tracked in 2025.
bleepingcomputer.com
· 2026-10-27
Microsoft will roll out AI-powered, context-aware phishing detection in Teams starting in early November 2026, with general availability expected worldwide by mid-December. The feature analyzes conversation context—particularly in external first-contact chats—to spot phishing, impersonation and social engineering attempts without relying solely on malicious links or files, and Microsoft says it won't retain message content for training or other purposes.
bleepingcomputer.com
· 2026-10-23
Microsoft's Security blog reports that Storm-0940, a China-state-aligned hacking group, used an open-source AI agentic penetration-testing tool called ARTEX to exploit stolen ConnectWise application credentials, attempting sign-ins across more than 2,250 Microsoft 365 tenants. The group also ran automated password-spraying attacks against 327 accounts at eight organizations, generating over 151,000 failed login attempts without success. Microsoft says the breach did not stem from any vulnerability in its own systems and that it remains unclear how the ConnectWise credentials were obtained or how many tenants were actually compromised.
tomshardware.com
· 2026-10-23
Microsoft said the threat actor it tracks as Storm-0940 used compromised application credentials tied to ConnectWise Cloud Backup to try to access more than 2,250 downstream Microsoft 365 customer tenants. In some cases attackers reached privileged cloud access within three hours of targeting, and Microsoft said the group used an agentic AI penetration-testing framework to speed up the campaign. ConnectWise disclosed unauthorized access to its Cloud Backup application identities on Oct. 16 but has not said how attackers first obtained control of them.
darkreading.com
· 2026-10-22
Microsoft has published steps for IT admins to restore access to the Exchange Web Services (EWS) API after apps relying on it began failing with login prompts or protocol errors. Admins can either uncheck a block option in the Microsoft 365 admin center's Baseline Security Mode or run a PowerShell command to re-enable EWS within four hours. Microsoft says this workaround only lasts until April 2027, when EWS will be permanently retired.
bleepingcomputer.com
· 2026-10-22
ConnectWise disclosed that a threat actor used credentials tied to its Cloud Backup product (formerly SkyKick) to authenticate into Microsoft 365 tenants, discovering unauthorized access to application identities on Oct. 14. The company has since disabled Cloud Backup, SaaS Security, and Cloud Management for partners and clients while an incident response firm investigates, leaving backup, restore, and monitoring functions unavailable.
darkreading.com
· 2026-10-19
Microsoft has patched an issue in the classic Outlook desktop client that caused Copilot Chat and Copilot buttons to disappear from the navigation pane and ribbon for some licensed users. The company traced the problem to Outlook failing to retrieve certain account information from users' profiles, and said the fix addresses that root cause. This marks the second time Microsoft has fixed the bug after it resurfaced following recent updates despite an earlier June patch.
bleepingcomputer.com
· 2026-10-19
Microsoft now primarily sells Office through its Microsoft 365 subscription rather than one-time purchases, with a standalone license available for $180 but limited to one PC. The Family subscription plan includes 1TB of cloud storage per user, but Microsoft has added AI features to its plans and raised prices without an option to opt out of AI tools.
engadget.com
· 2026-10-17
A CNET writer detailed switching from Microsoft 365 to LibreOffice, a free and open-source office suite developed by The Document Foundation since 2010. The suite includes six applications—Writer, Calc, Impress, Draw, Base and Math—that mirror Microsoft's Word, Excel, PowerPoint, Visio and Access, and it runs on Windows, MacOS and Linux.
cnet.com
· 2026-10-17
ConnectWise shut down customer access to its Cloud Backup service, formerly SkyKick Cloud Backup, after attackers gained access to application identities used to connect to Microsoft 365 tenants. Microsoft confirmed unauthorized authentication attempts from an IP address on October 15, while security firm Huntress identified at least 162 compromised tenants in its own environment. ConnectWise says it has found no evidence that customer backup data itself was accessed, and existing backups remain intact.
bleepingcomputer.com
· 2026-10-17
GoKawiil