In Other News: Microsoft’s Cloud Patches, Hacked Dropbox Accounts, Guardio’s $1.1B Valuation

Microsoft released server-side patches addressing nine vulnerabilities across several cloud services including Entra ID, Azure Cosmos DB, Power Automate, and others, requiring no customer intervention. Approximately 5,000 Dropbox accounts were compromised through abuse of Lenovo’s email verification process, allowing attackers to register Lenovo IDs with victim emails and access Dropbox accounts; Dropbox closed all unauthorized sessions. Other notable events include ransomware attacks on Minnesota’s Winona County, publication of exploit code for a Microsoft Exchange Server vulnerability affecting over 21,000 unpatched servers, phishing campaigns targeting Microsoft 365 and Google Workspace credentials, and security updates from Plex. The report also covers malware distribution via compromised module registry infrastructure and law enforcement actions against a Russian malware distributor.

The Microsoft cloud service vulnerabilities could have allowed attackers to exploit various cloud components, but the vendor deployed server-side patches requiring no customer action, mitigating risk effectively. The Dropbox account compromises exposed user data and access due to weaknesses in Lenovo’s email verification integration, potentially leading to unauthorized data access. The ransomware attacks caused service disruptions and financial loss. Published exploit code for an Exchange Server vulnerability increases risk for unpatched servers. Phishing campaigns threaten credential theft for major cloud productivity platforms. Malware distribution through trusted infrastructure and ongoing threat actor activities pose additional risks to users and organizations.

Microsoft’s patches for the cloud service vulnerabilities have been deployed server-side; customers are not required to take any action. Dropbox has closed all unauthorized sessions related to the Lenovo login abuse incident. Organizations should ensure their Microsoft Exchange servers are patched against CVE-2026-62911 to prevent exploitation. Users should remain vigilant against phishing campaigns targeting Microsoft 365 and Google Workspace credentials. Plex users are advised to update to the latest versions 1.43.3 (Media Server) and 1.115.0 (Desktop) to address multiple security vulnerabilities. Monitoring vendor advisories and applying official patches promptly remains critical.