System Live // Signal Active

M365 Cyber Governance Daily

Weekday intel briefings on Copilot, Defender, Purview, Entra, and cyber threats.

← All episodes

Wed, 28 Oct 2026 · 15:37

TRANS_ID: 2026-10-28

Authenticator Token Theft and AI Agent Swarms

A fake Teams app could take work tokens from Microsoft Authenticator for Android.

  • Microsoft Authenticator for Android (CVE-2026-80097): a fake Teams app could get work-account Graph tokens; fixed in 6.2606.4246.
  • MC1450134: Windows Hello for Business and macOS Platform SSO count as standalone MFA from early November; MC1528000 SMS/voice MFA retires 1 Feb 2027.
  • CISA KEV: Brotli CVE-2026-111497 and Adobe Commerce/Magento due 10 Nov; PHP2Shell due 29 Oct.
  • MC1481315: Purview DSPM classic and DSPM for AI classic retire late January 2027.
  • Warp breach exposes AI agent logs; CyberStrikeAI runs attacks with 44 AI agents.

This episode is AI-voiced (NotebookLM) from Ted Johansson's curated daily M365 and cyber governance digest.

SPECTRUM ANALYSISBITRATE: 320KBPS
0:00—

C:\> DEPLOYING_INTEL_UPDATE... SUCCESS

UNCLASSIFIED // FOR OFFICIAL USE ONLY

Episodes are generated from NotebookLM Audio Overview; add a new row to the episodes data each weekday with title, blurb, and audio file URL.