Microsoft 365 Massive Outage – Fixes Fail as Restored Servers Keep Going Unresponsive
Matched: health
A Microsoft 365 outage exceeding 10 hours continues as restored servers repeatedly fail under user traffic load. Beginning November 12, 2026, the disruption spread from Exchange Online to Teams, SharePoint, Copilot, and Defender across all regions. Microsoft is rebuilding servers on previous configurations, limiting traffic, and rerouting load while analyzing root cause. Over 120,000 Outlook reports peaked across 74 countries. No cyberattack is involved.
Massive Microsoft 365 Outage Impacts Exchange Online, Teams, SharePoint, Copilot, and Defender XDR Users
Matched: health
A major Microsoft 365 outage beginning November 12, 2026 disrupted Exchange Online, Teams, SharePoint, Copilot, and Defender XDR globally. Microsoft attributed the failure to servers unexpectedly going offline, overloading remaining infrastructure. Failed automated health checks complicated recovery, with restored servers becoming unresponsive under traffic load. Engineers rerouted traffic and explored configuration rollbacks. Full restoration had not been confirmed. Administrators should monitor incidents MO1550821 and EX1550543 in the Microsoft 365 admin center.
Microsoft Teams Outage Hits Users in North America
Matched: health
Microsoft is investigating a Teams outage affecting North American users, tracked as TM1550488 in the Microsoft 365 admin center. Automated recovery measures are underway, with telemetry showing reduced impact, though full restoration is unconfirmed. No root cause, timeline, or affected features have been specified. Administrators are advised to monitor the admin center and document user-reported issues for comparison against official updates.
nDiligence Releases Four-Year Study Identifying a Critical Supply-Chain Vulnerability Across 50 Platform Types
Matched: medical
nDiligence has released a four-year study identifying a supply-chain vulnerability affecting all 50 software and device types examined, with 46 rated critical or high risk. The flaw targets runtime client-side rendering, where attackers compromising any supplier in an app's chain can alter what users see and do after all security checks have passed. Affected platforms include browsers, medical devices, and industrial controls. Full research is freely available at atg.nDiligence.com.
Hackers Abuse Cruciferra Malware-as-a-Service to Conceal Infostealers and Remote Access Trojans
Matched: health
Cybercriminals are renting a crypter tool called Cruciferra to hide infostealers and RATs from security software. Priced at $450–$2,000 monthly, it uses 90+ encryption routines, DLL side-loading, sandbox detection, and BYOVD driver attacks to evade defenses. Active since October 2025 and linked to the older KGB cryptor, it has prompted over 700,000 blocked compromise attempts since January 2026, primarily targeting Türkiye, Greece, and Spain. Payloads include AsyncRAT, XWorm, and Agent Tesla.
Top 10 Best HIPAA Compliance Software in 2026 [Ranked & Scored]
Matched: health
Vanta tops a 2026 ranking of HIPAA compliance software, followed by Drata and Compliancy Group. The list splits tools into two buyer categories: vendor-proof automation platforms for digital-health companies seeking certification, and covered-entity coaching tools for healthcare providers. Paubox and Censinet appear as specialist options for encrypted email and healthcare vendor risk management. Reviewers weighted lane-core capability, risk-assessment depth, and BAA tracking in their scoring methodology.
Top 10 Best IT & Cyber Risk Management Tools in 2026 [Ranked & Scored]
Matched: health
A 2026 ranking scores ten IT and cyber risk management platforms on register workflow, control linkage, scoring range, and reporting. ServiceNow leads for wiring risk registers to live operations; Archer ranks second for deep methodology configurability; LogicGate third for no-code speed. MetricStream suits federated enterprises, Diligent excels at board reporting, and IBM OpenPages serves regulated industries with AI assistance. Riskonnect unifies insurable and cyber risk, Balbix provides exposure math, SAI360 covers operational compliance, and Vanta offers a compliance-fed starter register. The defining 2026 theme is register freshness—tracking what percentage of entries have a current owner, treatment, and review date.
Criminal IP Launches New TI Feed App on Splunkbase for Automated Threat Detection
Matched: health
AI SPERA has launched the Criminal IP TI Feed app for Splunk on Splunkbase. The app automatically correlates Criminal IP threat intelligence with firewall traffic logs to identify whether organizational assets communicated with malicious IPs and if sessions were completed. It runs correlation searches every 10 minutes, performs 30-day retrospective analysis, and offers seven dashboards plus Slack alerting to help SOC teams prioritize threats efficiently.
Top 10 Best Audit Management Software in 2026 [Ranked & Scored]
Matched: health
Cybersecurity News ranked the top 10 audit management software platforms for 2026, using criteria including fieldwork ergonomics, evidence automation, SOX depth, and reporting. Onspring leads for no-code configurability, followed by ServiceNow for findings routing and Caseware for audit-to-financial-reporting integration. TeamMate, Diligent, MetricStream, Hyperproof, Archer, Ideagen, and Netwrix round out the list by specialty. AI-assisted narrative drafting was noted as a genuine 2026 development, with mandatory reviewer sign-off emphasized.
Finite State Raises $27 Million to Help Device Makers Fight ‘Vulnpocalypse’ with AI-Powered Product Security
Matched: medical
Finite State, a Columbus-based product security firm, raised $27 million in Series C funding led by The O.H.I.O. Fund to expand its AI-driven platform that analyzes firmware and software in connected devices. The funding addresses a surge in AI-discovered vulnerabilities dubbed the "Vulnpocalypse" and growing global regulations requiring manufacturers to demonstrate built-in security before devices ship.