Security Log
Security news that affects Microsoft 365 environments, explained in plain words, with what to check and what to do.
- Compromised eMudhra certificates: what to check in your Microsoft 365 environment
The private keys of eight eMudhra intermediate certificates can be recovered by anyone. Browsers and operating systems now block them, so the risk is in devices and apps that are not up to date.
- PHP2Shell: two critical PHP flaws, and what they mean for your Microsoft 365 tenant
CVE-2026-109618 and CVE-2026-109619 let an attacker run code on PHP web servers with one request. What to patch, how to check Azure, and how to protect the Entra ID identities those servers hold.