60
30
60
50
60
60
30
45
30
57
57
60
60
57
30
60
60
55
30
42
42
Most Organizations Skip Permissions Reviews Before Deploying AI Tools
Syskit survey of 327 US/UK IT leaders finds 76% deployed M365 AI tools but only 43% reviewed permissions and oversharing risk first.
Syskit's State of Microsoft 365 Governance Report 2026, based on a survey of 327 IT and security decision-makers at US and UK organizations with 500+ employees, shows most enterprises deploy AI tools like Copilot without thorough permissions reviews. Only 22% have a formal policy defining what AI agents may access, and 9% let agents inherit the deployer's full permissions. 90% report experiencing or suspecting a security incident tied to M365 misconfigurations or over-permissioned access in the past two years.
38
30
30
42
Microsoft security advisory – September 2026 monthly rollup (AV26-896) – Update 1
Canada's Cyber Centre relays Microsoft's September 2026 rollup; CISA added exploited zero-days CVE-2026-85880 and CVE-2026-81963 to KEV.
Advisory AV26-896 from the Canadian Centre for Cyber Security summarizes Microsoft's September 2026 monthly security rollup, listing affected products across Windows, Office, .NET, Azure, Exchange and SQL Server. It notes Microsoft confirmed CVE-2026-81963 and CVE-2026-85880 have been exploited. On September 8, 2026, CISA added both CVEs to its Known Exploited Vulnerabilities catalog, and administrators are urged to apply the updates.
65
60
30
30
30
60
30
55
30
60
57
55
30
57
Week in review: PoC for Splunk Enterprise RCE flaw released, scope of Okta breach widens
60