New investments to reduce on-premises security risk

Microsoft announced a new initiative to reduce security risks for on-premises server workloads such as Exchange Server, SharePoint Server, and Skype for Business Server. The initiative focuses on improving security posture by providing guidance, encouraging migration to cloud services, and hardening on-premises products with a baseline security mode. This mode aims to simplify secure configuration, accelerate patch deployment including automatic updates, and introduce emergency mitigations to reduce exposure to emerging threats. The goal is to reduce manual security management while maintaining administrator control and adapting protections as threats evolve.

• techcommunity.microsoft.com/blog/microsoft-security-blog/new-investments-to-reduce-on-premises-security-risk/4570381 (opens in a new tab)

• ​​​​What’s new in Microsoft Security: November 2026Analysis2026-11-05
• CVE-2026-119083: GluonTS arbitrary file write during archive extractionHighVulnerability2026-11-05
• CVE-2026-122266: Amazon EKS · Improper isolation of shared resources in aws-network-policy-agentHighVulnerability2026-11-04
• GCP-2026-078MediumVulnerability2026-11-04
• CVE-2026-122192: Guest Access to Firecracker Process Memory After a Failed Memory DiscardHighVulnerability2026-11-04