Microsoft Cloud Patches, Dropbox Account Compromise, and Other Cybersecurity News
Summary
This roundup covers Microsoft cloud patches, an Exchange exploit, compromised Dropbox accounts, ransomware, phishing, malware delivery through Coder’s registry, and other security developments.
Key points
- Microsoft released server-side fixes for nine vulnerabilities across Entra ID, Azure services, Power Automate, Copilot Studio, and related products; customers need take no action.
- An exploit was published for CVE-2026-62911, an Exchange Server flaw patched in August. The Netherlands National Cyber Security Centre warned that more than 21,000 servers remained unpatched as of September 1.
- Dropbox said attackers compromised about 5,000 accounts by abusing Lenovo’s email verification process. It closed unauthorized sessions and access.
- The Knight Office adversary-in-the-middle phishing kit targets Microsoft 365 and Google Workspace credentials through token theft, which can bypass password and MFA requirements.
- Coder said an attacker altered its Cloudflare infrastructure so its module registry briefly served malicious code to some users; downloads infected users with a credential stealer.
- Winona County reportedly paid $128,539.57 after a January ransomware attack and suffered a second attack in April, claimed by the InterLock gang; responsibility for the January attack is unclear.
- Plex released security updates for multiple vulnerabilities in Plex Media Server and Plex Desktop, but did not disclose bug details or CVE identifiers.
Article Details
- Event Type
- Weekly cybersecurity news roundup covering vulnerability patches and exploits, ransomware, account compromise, phishing, malware distribution, and cybersecurity industry developments.
- Impact
- The roundup reports that approximately 5,000 Dropbox accounts were compromised through abuse of Lenovo's email verification process, and that malicious code served through Coder's module registry infected users who downloaded it with a credential stealer. It also reports ransomware attacks affecting Winona County, an AitM phishing kit targeting Microsoft 365 and Google Workspace credentials, and exploit code for an Exchange Server vulnerability affecting unpatched servers. Microsoft and Plex released security updates; the article does not provide further details on the vulnerabilities patched.
CVE
People
Threat Actors
Vendors
Products
Azure Active Directory B2CMicrosoft has released patches for nine vulnerabilities in Entra ID, Azure Cosmos DB, Power Automate, Copilot Studio, Azure Active Directory B2C, Fabric, Azure AI Language, and Discovery Studio.Azure AI LanguageMicrosoft has released patches for nine vulnerabilities in Entra ID, Azure Cosmos DB, Power Automate, Copilot Studio, Azure Active Directory B2C, Fabric, Azure AI Language, and Discovery Studio.Azure Cosmos DBMicrosoft has released patches for nine vulnerabilities in Entra ID, Azure Cosmos DB, Power Automate, Copilot Studio, Azure Active Directory B2C, Fabric, Azure AI Language, and Discovery Studio.Discovery StudioMicrosoft has released patches for nine vulnerabilities in Entra ID, Azure Cosmos DB, Power Automate, Copilot Studio, Azure Active Directory B2C, Fabric, Azure AI Language, and Discovery Studio.Entra IDMicrosoft has released patches for nine vulnerabilities in Entra ID, Azure Cosmos DB, Power Automate, Copilot Studio, Azure Active Directory B2C, Fabric, Azure AI Language, and Discovery Studio.FabricMicrosoft has released patches for nine vulnerabilities in Entra ID, Azure Cosmos DB, Power Automate, Copilot Studio, Azure Active Directory B2C, Fabric, Azure AI Language, and Discovery Studio.Google WorkspaceKnight Office phishes for Microsoft 365 and Google Workspace credentialsMicrosoft 365 Apps for EnterpriseKnight Office phishes for Microsoft 365 and Google Workspace credentialsMicrosoft Copilot StudioMicrosoft has released patches for nine vulnerabilities in Entra ID, Azure Cosmos DB, Power Automate, Copilot Studio, Azure Active Directory B2C, Fabric, Azure AI Language, and Discovery Studio.Microsoft Exchange ServerExploit code has been published for CVE-2026-62911, a high-severity Microsoft Exchange Server vulnerability patched in August, the Netherlands National Cyber Security Centre warns.Plex DesktopThe popular streaming service Plex this week announced the release of Plex Media Server 1.43.3 and Plex Desktop 1.115.0 with patches for multiple security vulnerabilities, urging users to update their instances as soonPlex Media ServerThe popular streaming service Plex this week announced the release of Plex Media Server 1.43.3 and Plex Desktop 1.115.0 with patches for multiple security vulnerabilities, urging users to update their instances as soonPower AutomateMicrosoft has released patches for nine vulnerabilities in Entra ID, Azure Cosmos DB, Power Automate, Copilot Studio, Azure Active Directory B2C, Fabric, Azure AI Language, and Discovery Studio.
Countries
Industries
Freelance employment40, of Russia, has been charged in the US with exploiting the online message platform of a freelance employment company in California to deliver malware to 80,000 freelance users between June 2016 and NovemberWater and wastewater utilitiesGovernor have launched Project Watershed 250, a federal-private sector effort to provide water and wastewater utilities in Texas with access to free cyber defense resources and hardened then against cyberattacks