Attackers hide command and control in trusted cloud services
Cited cases include Gridtide on Google Sheets, SesameOp via OpenAI APIs, and a reported Intune wipe at Stryker.
34
Product
Microsoft Intune
- Mentions · 7d0
- Mentions · 30d3
- All mentions12
- First seenSep 9, 2026
- Last mentioned10d ago
Timeline
12 articles · newest firstWindows 11 26H2 Enables Settings Backup by Default for Eligible Devices
Windows 11 26H2 enables settings backup by default on eligible unconfigured Entra-joined commercial devices.
36
Microsoft Enables Windows 11 Backup Setting by Default for Organizations
Microsoft enables Windows 11 26H2 settings backup by default when the policy is left unconfigured.
44
WSL containers are generally available on Windows
Microsoft made WSL containers generally available with Intune controls and Defender for Endpoint visibility.
42
Microsoft is rolling out Linux container support to WSL
Microsoft made Linux container support in WSL generally available, with Defender and Intune controls.
34
What’s new in Microsoft Security: September 2026
Microsoft Security updates address AI agent governance, Zero Trust, and SOC foundation improvements with new data protection and management tools.
10
GhostCode attackers abuse device codes to take over Microsoft 365 accounts
GhostCode phishing kit abuses Microsoft's OAuth device authorization flow to harvest tokens, register devices, and steal primary refresh tokens from M365 victims.
65
GhostCode Abuses Microsoft Entra Device Enrollment to Maintain Access After Token Revocation
eSentire exposes GhostCode, a device-code phishing kit that abuses Microsoft Entra device enrollment to persist even after stolen tokens are revoked.
73
Windows 11 Security Update KB5124008 Breaks Always-On VPN Connections
Microsoft's September 2026 Windows 11 update KB5124008 breaks certificate-based Always On VPN on some enterprise clients, forcing admins to pause rollout.
48
The 12 Best Mobile Device Management (MDM) Solutions, Compared and Priced
A comparison of 12 MDM platforms ranks Microsoft Intune as best value for Microsoft 365 estates and Jamf, Kandji, and Mosyle for Apple fleets.
12
The 12 Best Unified Endpoint Management (UEM) Solutions, Compared and Priced
A buyer's guide compares 12 unified endpoint management platforms, recommending Microsoft Intune, Jamf and Omnissa for common scenarios.
10
Top 10 Best Mobile Device Management (MDM) Solutions in 2026
A 2026 MDM buyer guide ranks ten solutions, recommending Microsoft Intune for Microsoft 365 estates and Jamf for Apple-only environments.
14
Related CVEs
by mentions- CVE-2026-85880<1%7.8Heap-Based Buffer Overflow in Windows ALPC Enables Local Privilege Escalation
- CVE-2026-81963<1%7.8Local Privilege Escalation via Link Following in Windows Update Stack
Appears with
- Microsoftvendor · 12
- Microsoftorganization · 5
- Windows 11product · 3
- ManageEnginevendor · 3
- Omnissavendor · 3
- Jamfvendor · 3
- Mosylevendor · 2
- Kandjivendor · 2
- GhostCodethreat actor · 2
- Microsoft Entraproduct · 2
- WSL containersproduct · 2
- Kandjiproduct · 2
- Ivantivendor · 2
- Workspace ONEproduct · 2
- Microsoft Entra IDproduct · 2
- Visual Studio Codeproduct · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.