ConnectWise sets a restore timeline while APT41's BlackX bootkit bypasses fully patched Windows. ConnectWise targets restored Cloud Backup access early next week.Microsoft publishes a guide to troubleshooting revoked Entra application credentials.Kaspersky links APT41 to BlackX; fully patched Windows remains vulnerable unless the KB5025885 Secure Boot revocation is applied.The exploited Arista VeloCloud Orchestrator zero-day CVE-2026-114625.PHP2Shell probing began before disclosure. This episode is AI-voiced (NotebookLM) from Ted Johansson's curated daily M365 and cyber governance digest. Rss
