Microsoft authentication services have experienced a global outage, preventing MFA configuration and access to the central portal for sign-in activity management.
European regulation through the EU AI Act and NIS2 Directive shapes digital sovereignty requirements and demands new governance and security structures from CDOs.
Cyber resilience must be planned across ecosystems rather than within individual organizations, as dependencies create attack vectors and propagation pathways for security incidents.
Microsoft’s Entra Passkeys enable phishing-resistant authentication on private and unmanaged endpoints, reducing the attack surface for password-based compromises.
A security researcher publicly releases six zero-day exploits for Microsoft products without giving the company a chance to patch – CISOs must prepare for immediately exploitable vulnerabilities.
Russian cyber group GREYVIBE has been conducting targeted attacks against Ukraine since August 2025 and requires heightened vigilance in NIS2 reporting chains.
A CISA contractor stored administrative AWS GovCloud credentials, plaintext passwords, and access tokens in a public GitHub repository after intentionally disabling GitHub’s native secrets detection.
