M365 Cyber Governance Daily

M365 Graph API Backdoors and Governance

Tuesday's M365 and cyber governance briefing starts with patch deadlines: the out-of-band Exchange CVE-2026-96940 fix, tomorrow's Citrix NetScaler KEV deadline and the Dell System Update flaw. Next is the Antino backdoor, which hides its command traffic in Microsoft Graph, Outlook and OneDrive, with tips for hunting it in Defender. It then covers identity (the Entra MemberOf retirement on 3 Nov and the Denmark CPR breach), Exchange and Outlook changes, Purview updates and Copilot spending-policy settings.