Microsoft's cloud productivity suite, including Office apps, Teams, Exchange/Outlook mail, and SharePoint, used by businesses and consumers.
Barracuda found CAPTCHA abuse in 43% of the phishing-kit attacks it examined during 2025. The check can keep automated scanners from reaching the next page, so a URL scan may inspect only the CAPTCHA.
Reality
Proofpoint will ship four Microsoft 365 security features to MSP partners in the fourth quarter, led by a tenant permission-risk map. Its argument is that oversharing and stale guest accounts need cleaning up before customers switch on AI tools, so the partner's first job is a cleanup.
Reality
The Dutch Tax and Customs Administration cancelled its Microsoft 365 public-cloud rollout after about 5,000 employees had migrated. The faults cited sit in one deployment's design, so European buyers should price an exit before they price a replacement.
Reality
Microsoft's Copilot app costs about $30 a seat a month, with 30% off above 1,000 seats and 50% off above 10,000, CryptoBriefing reported. If tiers cover whole orders, a buyer just under 10,000 seats may pay less by ordering past the line.
Reality
US, UK and allied governments on October 8 described sanctioned Integrity Technology Group as a tool and infrastructure supplier that enabled Flax Typhoon. Its technique list centers on email theft and names the files and clients operators left on victim systems.
Reality
JumpCloud surveyed 250 IT leaders and found 59% of organisations using AI agents have not fully integrated them into identity and access management. For incident responders the harder number is the 36% that investigated an AI-related concern and could not establish what the AI had accessed.
Reality
Google Cloud's Gemini agent works inside Workspace, Microsoft 365, Slack and the command line, keeping one set of memories across all of them. For whoever rolls it out, the work becomes wiring in the systems of record and access controls it depends on.
Perspective Coverage
25 publishersReality
Just 474 of the 1,000 most popular websites set DMARC to reject spoofed mail, a dev.to survey of their DNS found. Thirty-two months after Google and Yahoo began requiring DMARC from bulk senders, 84.5% of the sites publish a record, but only 69.4% apply an enforcing policy to all their mail.
Reality
Microsoft will replace 1TB per user on Microsoft 365 Family, Premium and Pro with one shared 2TB pool at renewals after May 2, 2027. A fully used six-seat plan falls from 6TB to 2TB at the same price, so households and small teams should add up their usage before they renew.
Reality
Microsoft has shipped security updates almost monthly for Office 2016 and 2019 since their end of support, Help Net Security reported. The forecast's author argues the old suites are probably not tested against Microsoft's other updates, so the compatibility risk sits with the teams still running them.
Reality
Microsoft is cutting the OneDrive storage in its 365 Family and Premium plans to a single shared 2TB pool, down from the 6TB a full household holds today. Subscribers who store more than that will have to delete files or buy the space back when the change reaches their plan.
Reality
Nikkei said attackers used hijacked staff Microsoft 365 accounts to send about 9,000 malicious-link emails on September 30, many to outside sources. The company believes recipients' names and addresses were exposed and expects more mail impersonating its staff.
Perspective Coverage
6 publishersReality
Microsoft has tracked passkey- and SSO-themed help desk impersonation since May 2026, with the calls steering employees into adversary-in-the-middle proxies and device-code grants that hand over live Microsoft 365 sessions.
Perspective Coverage
3 publishersReality
Dutch tax agency Belastingdienst is dropping a Microsoft 365 cloud migration for its own servers and open-source tools, moving email and calendars in 2027. Added data centre capacity helped make the switch workable, though some records-management features have no on-premises version yet, TNW reported.
Reality
Huntress tied one rogue ScreenConnect configuration from a Power BI phishing campaign to 22 more endpoints across separate incidents. For defenders, the thing to hunt is a ScreenConnect client their own IT never deployed.
Reality
Ryan Roslansky, who took LinkedIn from 700 million to 1.3 billion members, will leave Microsoft at the end of 2026, citing his family's ties to the Bay Area. Nadella will split the Microsoft 365 and Copilot role among executives already in place.
Perspective Coverage
5 publishersReality
Huntress found legitimate remote management software abused in 45% of the endpoint incidents it logged in the first quarter of 2026. A rogue copy can behave like IT's approved one, so defenders have to know which tools are sanctioned and how each install arrived.
Reality
Proofpoint says China-aligned TA419 has posed as a former White House official and an Anthropic employee to phish AI policy experts since at least April 2025. The first approach asks for nothing; the credential-stealing link follows only after a target replies.
Perspective Coverage
7 publishersReality
Cisco Talos links China-nexus UAT-11587 to 16 affected or targeted institutions in eight Asian countries, via a backdoor run through Microsoft 365. Its commands move through Outlook and OneDrive via Microsoft Graph, so defenders have no command server to block.
Perspective Coverage
3 publishersReality
Ryan Roslansky, Microsoft's Office and Teams chief, is leaving after nearly 18 years, a week after the company announced its new Copilot. His teams now report to Charles Lamanna in the Copilot, Agents, and Platform organization, so Office is run from inside Microsoft's Copilot group.
Perspective Coverage
4 publishersReality
Security · September 7, 2026 · Confirmed3 publishers
Security · September 7, 2026 · Confirmed3 publishers
Leadership · September 21, 2026 · One report1 publisher
Product · September 17, 2026 · Confirmed10 publishers
Security · August 26, 2026 · Confirmed2 publishers