Security News Update: Can You Get Spyware Just by Looking at Ad Without Clicking It? and more

Meta brings its most capable open model to Apple’s Macs Meta released the weights for Muse Spark Open, one of the strongest American-made open models currently available. The model is optimized to run on Apple silicon, but there’s one catch: you’ll need at least two top-spec M5 Ultra Mac Studios. The release signals a thawing …

Summary Microsoft Dataverse environments hosted in CHE will receive a minor service update, moving the environment version to 9.2.26102.00000 or higher. The update is planned as part of Microsoft’s scheduled maintenance process for the region. Microsoft expects no service degradation or availability loss, but users may see brief transient SQL errors or be redirected to …

Summary Microsoft Dataverse in OCE will receive a minor service update, moving environments to version 9.2.26102.00000 or higher. The update is planned as part of Dataverse’s scheduled maintenance process for the region. Microsoft expects no service degradation, but users may briefly experience transient SQL errors or a redirect to the login screen during the maintenance …

Microsoft Patches 1,400 Flaws, Including Active Zero-Day Microsoft’s Patch Tuesday fixed over 1,400 vulnerabilities, including an actively exploited Windows vulnerability. The release also fixes critical Outlook flaws that could allow remote code execution without user interaction. With 1,400-plus flaws to triage, I’d prioritize active exploitation and actual exposure over severity scores alone. Map affected systems …

Anthropic’s IPO targets $1.8–2 trillion valuation — leaked prospectus shows $4.6B 2025 revenue, $8B operating loss, $518B in compute obligations — public filing expected around October 25 Anthropic confidentially filed its S-1 in June 2026. The leaked numbers are stark: $4.6B in 2025 revenue growing at aggressive pace, offset by an $8 billion operating loss, …

We identified that an app, flow, or agent in your environment utilizes a connection to the Azure DevOps connector that was created prior to September 1, 2024. These connections use a legacy app registration method for authentication, which is being removed. Once removed, any flow, app, or agent using those connections will no longer be …

Beginning with the October 2026 security update, Windows 11, versions 26H2, 25H2, and 24H2, along with Windows Server 2025 enforce restrictions on generating NTLMv1-derived credentials for Single Sign-On by default. This planned security-hardening change is part of the boarder Microsoft effort to phase out NTLM. Microsoft originally documented the change in August 2025. This change …

On October 14, 2026, the Word Online (Business) connector will remove its dependency on temporary, pre-authorized download URLs. This change improves the security for file access in SharePoint and OneDrive scenarios by requiring authenticated access for generated document content. Message ID: MC1508992 Published: Oct 15, 2026 Service: Power Platform Tag: User impact, Admin impact How …

We are announcing the ability to choose the data sources AI-powered Data Enrichment uses, including CRM notes in Dynamics 365 Apps. This feature will reach general availability on October 23, 2026. Message ID: MC1509121 Published: Oct 15, 2026 Service: Dynamics 365 Apps Tag: New feature How does this affect me? This feature enables admins to …

Automatic zone balance for Virtual Machine Scale Sets is now generally available. This feature continuously monitors scale sets deployed across availability zones and automatically redistributes VM instances when zonal imbalances occur. This helps reduce the risk that a single-zone outage disproportionately affects an application. Azure update ID: 576334 Published: Oct 15, 2026 Status: Launched Timeline: …