[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fs_oEqHqsAdgRBjDVi3h6VF1TQTYygs4TX1Anho3kgBE":3},{"article":4,"iocs":54,"watch_terms":59,"solutions":60,"lesson":152},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"c2b80267-8d6d-4014-b034-d17be38c2a5f","In Other News: Microsoft’s Cloud Patches, Hacked Dropbox Accounts, Guardio’s $1.1B Valuation","in-other-news-microsoft-s-cloud-patches-hacked-dropbox-accounts-guardio-s-1-1b-v-f44fd1","Noteworthy stories that might have slipped under the radar: Microsoft rolled out patches for cloud services, hackers compromised 5,000 Dropbox accounts, and Guardio is now valued at $1.1 billion. The post In Other News: Microsoft’s Cloud Patches, Hacked Dropbox Accounts, Guardio’s $1.1B Valuation appeared first on SecurityWeek.","This roundup covers multiple security incidents including Microsoft patching vulnerabilities in several cloud services, and a ransomware attack on a Minnesota county that resulted in a $128K payment. Additionally, 5,000 Dropbox accounts were compromised due to an integration issue with Lenovo, and exploit code was published for a critical Microsoft Exchange Server flaw affecting thousands of unpatched servers.","Microsoft patches cloud services, Dropbox accounts hacked, and a county pays ransom.","https:\u002F\u002Fwww.securityweek.com\u002Fin-other-news-microsofts-cloud-patches-hacked-dropbox-accounts-guardios-1-1b-valuation\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2023\u002F10\u002Fcybersecurity-news.jpg","2026-09-04T16:18:30+00:00","2026-09-04T18:00:21.330123+00:00",7,[17,20,23,25,27,29],{"name":18,"type":19},"Microsoft","vendor",{"name":21,"type":22},"Entra ID","product",{"name":24,"type":22},"Azure Cosmos DB",{"name":26,"type":22},"Power Automate",{"name":28,"type":22},"Copilot Studio",{"name":30,"type":22},"Azure Active Directory B2C","e7b231c8-5f79-4465-8d38-1ef13aea5a14",{"id":31,"icon":33,"name":34,"slug":35},null,"Threat Intelligence","threat-intelligence",[37,42,47,52],{"category":38},{"id":39,"icon":33,"name":40,"slug":41},"2e06f76c-d5b9-4f54-9eef-4d3447b10730","Breaches","breaches",{"category":43},{"id":44,"icon":33,"name":45,"slug":46},"80544778-fabb-4dcd-aa35-17492e5dcf4f","Vulnerabilities","vulnerabilities",{"category":48},{"id":49,"icon":33,"name":50,"slug":51},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":53},{"id":31,"icon":33,"name":34,"slug":35},[55],{"type":56,"value":57,"context":58},"cve","CVE-2026-62911","Microsoft Exchange Server vulnerability",[18,21,24],{"controls":61,"vendors":146},[62,91,117],{"slug":63,"name":64,"problem":65,"products":66},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",[67,75,83],{"vendor_slug":68,"vendor_name":69,"vendor_logo":70,"product_slug":71,"product_name":72,"url":73,"description":74},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","workforce-identity","Okta Workforce Identity","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fworkforce-identity\u002F","Single sign-on, adaptive MFA including phishing-resistant methods, and lifecycle management for employees.",{"vendor_slug":76,"vendor_name":77,"vendor_logo":78,"product_slug":79,"product_name":80,"url":81,"description":82},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","duo","Cisco Duo","https:\u002F\u002Fduo.com\u002F","MFA and device trust, with support for passkeys and security keys.",{"vendor_slug":84,"vendor_name":85,"vendor_logo":86,"product_slug":87,"product_name":88,"url":89,"description":90},"yubico","Yubico","\u002Fvendor-logos\u002Fyubico.png","yubikey","YubiKey","https:\u002F\u002Fwww.yubico.com\u002Fproducts\u002F","Hardware security keys for FIDO2, passkeys and smart card login, in USB and NFC versions.",{"slug":92,"name":93,"problem":94,"products":95},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",[96,104,112],{"vendor_slug":97,"vendor_name":98,"vendor_logo":99,"product_slug":100,"product_name":101,"url":102,"description":103},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-identity-protection","Falcon Identity Protection","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fnext-gen-identity-security\u002Fidentity-protection\u002F","Detection of identity attacks against Active Directory and Entra ID, with risk-based MFA.",{"vendor_slug":105,"vendor_name":106,"vendor_logo":107,"product_slug":108,"product_name":109,"url":110,"description":111},"vectra-ai","Vectra AI","\u002Fvendor-logos\u002Fvectra-ai.png","vectra-ai-platform","Vectra AI Platform","https:\u002F\u002Fwww.vectra.ai\u002Fplatform","Detection of attacker behaviour across network, identity and cloud.",{"vendor_slug":68,"vendor_name":69,"vendor_logo":70,"product_slug":113,"product_name":114,"url":115,"description":116},"identity-threat-protection","Okta Identity Threat Protection","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fidentity-threat-protection\u002F","Continuous risk assessment of sessions after login, with automatic actions such as ending sessions.",{"slug":118,"name":119,"problem":120,"products":121},"patch-management","Automated patch management","Known holes get closed in days, not months.",[122,130,138],{"vendor_slug":123,"vendor_name":124,"vendor_logo":125,"product_slug":126,"product_name":127,"url":128,"description":129},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":131,"vendor_name":132,"vendor_logo":133,"product_slug":134,"product_name":135,"url":136,"description":137},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":139,"vendor_name":140,"vendor_logo":141,"product_slug":142,"product_name":143,"url":144,"description":145},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",[147],{"slug":148,"name":18,"logo_path":149,"roles":150},"microsoft","\u002Fvendor-logos\u002Fmicrosoft.png",[151],"affected",{"slug":153,"title":154,"body":155,"framework_refs":156,"framework_notes":169},"unpatched-systems-and-third-party-integrations-fuel-multi-vector-attack-wave","Unpatched Systems and Third-Party Integrations Fuel Multi-Vector Attack Wave","This cluster of incidents highlights how delayed patching and insecure third-party integrations create compounding risks across organizations. The Minnesota county ransomware attack — resulting in a $128K payment — demonstrates that public sector entities remain high-value targets when incident response planning is immature and backups are insufficient to avoid paying. The Dropbox account compromise stemming from a Lenovo integration issue underscores that third-party software bundling can silently expand an organization's attack surface without direct user action. Meanwhile, thousands of unpatched Microsoft Exchange servers exposed to published exploit code represent a critical and entirely preventable risk that organizations have had ample time to address. Collectively, these incidents reinforce that unpatched vulnerabilities and unvetted integrations are among the most exploited — and most avoidable — attack vectors in the threat landscape.",[157,158,159,160,161,162,163,164,165,166,167,168],"CIS Control 7: Continuous Vulnerability Management","CIS Control 15: Service Provider Management","CIS Control 17: Incident Response Management","NIST SP 800-40: Guide to Enterprise Patch Management","NIST IR-4: Incident Handling","NIST SA-12: Supply Chain Protection","NIST RA-5: Vulnerability Monitoring and Scanning","NIST CP-9: System Backup","GDPR Article 32: Security of Processing (for EU-applicable breaches)","ITIL: Change Management \u002F Patch Management Practice","MITRE ATT&CK: T1190 Exploit Public-Facing Application","MITRE ATT&CK: T1486 Data Encrypted for Impact (Ransomware)",{}]