The volume of monthly discovered security vulnerabilities has surged due to improved AI-powered vulnerability detection; security teams must adjust their response times and prioritize by risk rather than following the Exploitability Index alone.
Microsoft is ending support for SMS and voice authentication in Entra ID from February 2027, forcing enterprises to switch to passkeys as the only remaining native MFA method.
Malicious browser extensions can leverage Claude Tasks in Chrome to access Gmail, Docs, and Calendar, but already require script execution rights on claude.ai.
