Microsoft Authenticator

Microsoft plans to shift Microsoft Authenticator's backup system on Android to Google One, with the change rolling out as part of a 2027 update. The move affects how users store and restore their account credentials, raising questions about storage limits and security under the new cloud arrangement. Cybersecurity commentators are flagging what the transition means for account recovery workflows.

A medium-severity vulnerability affecting Microsoft Windows Server editions has been catalogued as EUVD-2026-73019, with a CVSS v3.1 score of 5.5 out of 10. The flaw involves missing authentication for a critical function, affecting Windows Server 2025, Windows Server 2016 (Server Core installation), Windows Server 2012 and more than sixteen other configurations. The entry was published on 8 September 2026 and updated on 7 October 2026. Administrators are advised to check whether patches are available for affected builds.

A newly disclosed vulnerability in Microsoft Exchange Server, tracked as CVE-2026-96940, carries a high severity score of 8.8. Security researchers say an authenticated attacker could bypass authorization checks and read other users' mailboxes and attachments within the same on-premises Exchange organisation. The flaw does not allow pre-authentication remote code execution, but experts are warning administrators to review exposure and patch promptly.