Security & Threat Intelligence
-
Mini Shai Hulud: Compromised @antv npm packages enable CI/CD credential theft (2026-05-20) — Microsoft Security details a supply-chain attack on @antv npm packages that steals CI/CD credentials. https://www.microsoft.com/en-us/security/blog/2026/05/20/mini-shai-hulud-compromised-antv-npm-packages-enable-ci-cd-credential-theft/(opens in new window)
-
How Storm-2949 turned a compromised identity into a cloud-wide breach (2026-05-19) — Case study on how a single compromised identity escalated into a tenant-wide cloud breach. https://www.microsoft.com/en-us/security/blog/2026/05/18/storm-2949-turned-compromised-identity-into-cloud-wide-breach/(opens in new window)
-
Disrupting Fox Tempest: A cybercrime service (2026-05-19) — Microsoft on the Issues post on the legal/operational action taken against Fox Tempest, which abused “verified” software signing to deliver ransomware. https://blogs.microsoft.com/on-the-issues/2026/05/19/disrupting-fox-tempest-a-cybercrime-service/(opens in new window)
-
Exposing Fox Tempest: A malware-signing service operation (2026-05-19) — Companion Security Blog post with the technical anatomy of the Fox Tempest malware-signing-as-a-service operation. https://www.microsoft.com/en-us/security/blog/2026/05/19/exposing-fox-tempest-a-malware-signing-service-operation/(opens in new window)
-
Microsoft Defender for Business — the MSP reality check (2026-05-17) — CIAOPS blog post examining the practical pros and cons of Defender for Business from an MSP delivery perspective. https://blog.ciaops.com/2026/05/17/microsoft-defender-for-business-the-msp-reality-check/(opens in new window)
Microsoft 365 Apps & Productivity
-
Choose how OneNote opens Microsoft 365 file links (2026-05-21, also re-posted 2026-05-19) — New OneNote setting that lets users control whether linked M365 files open in the desktop app, browser, or Teams. https://techcommunity.microsoft.com/blog/Microsoft365InsiderBlog/choose-how-onenote-opens-microsoft-365-file-links/4520886(opens in new window)
-
A faster, more efficient editor experience with Narrator in Word (2026-05-19) — Improvements to Narrator’s performance and behaviour inside Word for screen-reader users. https://techcommunity.microsoft.com/blog/microsoft365insiderblog/a-faster-more-efficient-editor-experience-with-narrator-in-word/4507584(opens in new window)
Microsoft 365 Copilot
- Launched: Microsoft 365 Copilot Adoption Hub Redesign (2026-05-19) — Announcement of the refreshed Copilot Adoption Hub, with reorganised guidance and resources for rolling out Copilot. https://techcommunity.microsoft.com/blog/microsoft365copilotblog/launched-microsoft-365-copilot-adoption-hub-redesign/4520841
After hours
Clarkson’s Farm Series 5 | Official Trailer – https://www.youtube.com/watch?v=GJxPc3B2osU
Editorial
If you found this valuable, the I’d appreciate a ‘like’ or perhaps a donation at https://ko-fi.com/ciaops. This helps me know that people enjoy what I have created and provides resources to allow me to create more content. If you have any feedback or suggestions around this, I’m all ears. You can also find me via email director@ciaops.com and on X (Twitter) at https://www.twitter.com/directorcia.
If you want to be part of a dedicated Microsoft Cloud community with information and interactions daily, then consider becoming a CIAOPS Patron – www.ciaopspatron.com.
Watch out for the next CIA Brief next week
CIAOPS 