M365 Cyber Governance Daily

ConnectWise sets a restore timeline while APT41's BlackX bootkit bypasses fully patched Windows.

• ConnectWise targets restored Cloud Backup access early next week.
• Microsoft publishes a guide to troubleshooting revoked Entra application credentials.
• Kaspersky links APT41 to BlackX; fully patched Windows remains vulnerable unless the KB5025885 Secure Boot revocation is applied.
• The exploited Arista VeloCloud Orchestrator zero-day CVE-2026-114625.
• PHP2Shell probing began before disclosure.

This episode is AI-voiced (NotebookLM) from Ted Johansson's curated daily M365 and cyber governance digest.