The Week at a Glance

  • 🔴 AI-powered nation-state attack hit Microsoft 365 via supply chain: A state-sponsored threat group used agentic AI to compromise a widely used IT management tool, enabling credential theft across Microsoft 365 tenants - organizations using ConnectWise or similar remote management software should verify their exposure now.
  • 🔴 AI developer library poisoned to steal credentials: The LiteLLM open-source AI library was compromised in a supply chain attack that silently exfiltrated credentials; any team building or piloting AI applications should audit their software dependencies immediately.
  • 🟡 Exchange Web Services retirement is disrupting real applications: Microsoft has begun turning off a legacy email protocol, and some business applications - including Apple Mail on Mac, older Outlook versions, and third-party backup tools - are already breaking. A migration plan is overdue for many organizations.
  • 🟢 Microsoft Ignite 2026 brings significant endpoint and AI management announcements: Microsoft’s annual conference is surfacing new device management and AI security capabilities; awareness now will inform budget conversations for 2027.

Sources: Microsoft Security Blog - Storm-0940 ARTEX Campaign · Microsoft Security Blog - LiteLLM Supply Chain Compromise · Exchange Team Blog - EWS Retirement

Why This Week Matters

For the first time in a documented, large-scale incident, a nation-state adversary deployed autonomous AI to compress the attack timeline - from initial access through credential abuse across Microsoft 365 environments. This is the inflection point security leaders have anticipated: AI is now an offensive weapon, not just a defensive one. Organizations that have not yet stress-tested their identity controls, supply chain software inventory, and third-party access policies should treat this week’s disclosures as a call to action, not a news item to file away.

Sources: Microsoft Security Blog - Storm-0940 ARTEX Campaign · Microsoft Security Blog - LiteLLM Supply Chain Compromise

Risk & Compliance

  • 🔴 AI-driven nation-state supply chain compromise via ConnectWise: Storm-0940 used agentic AI (the ARTEX framework) to automate credential abuse across Microsoft 365 tenants through a compromised ConnectWise integration, closing the window of detection that defenders have historically relied on; organizations subject to HIPAA, SOC 2, or CMMC should treat this as a reportable-risk event and verify that third-party remote management tools are audited and access-scoped immediately.

  • 🔴 LiteLLM 1.107.0 supply chain compromise - credential theft via AI library: A poisoned version of a popular open-source AI library installed Python startup hooks to silently steal credentials and load remote code; any internal AI development project or vendor product using this library version represents an active credential-exposure risk requiring immediate software bill-of-materials review.

  • 🟡 Exchange Web Services (EWS) retirement breaking business applications: Microsoft is actively disabling this legacy email protocol, and affected applications - including Apple Mail on macOS, classic Outlook for Mac, older Windows Outlook clients, and third-party backup tools - are already failing; organizations that have not inventoried EWS-dependent applications risk operational disruption and potential gaps in email backup compliance under HIPAA or SOC 2 data retention requirements.

  • 🟡 CVE-2026-114148 ASP.NET Core Elevation of Privilege Vulnerability: Incorrect default permissions in ASP.NET Core allow an authenticated local attacker to elevate privileges; organizations running internal or customer-facing .NET web applications should confirm patching is complete with their IT team, particularly if those applications handle regulated data.

  • 🟡 CVE-2026-111497 Brotli Buffer Overflow in .NET: An out-of-bounds write vulnerability in the Brotli compression library bundled with .NET allows a remote, unauthenticated attacker to escalate privileges over a network; this strengthens the case for ensuring all .NET runtime environments are current before month-end.

  • 🟡 CVE-2026-105014 Azure Pipelines Remote Code Execution Vulnerability: A command-injection flaw in Azure Pipelines allows an unauthenticated remote attacker to execute code, posing a risk to any organization running software build and deployment automation in Azure DevOps; confirm remediation status with your development or DevOps team.

  • 🟢 Designing smarter access policies for hybrid enterprises: Microsoft has published updated guidance on adaptive access policy design for environments where users, apps, and AI agents share access to the same resources; this is context for teams planning identity modernization and Zero Trust maturity improvements.

  • 🟢 Power Pages connector API support for regulated industries: Native connectors to SQL, SAP, and Oracle from Power Pages are now generally available, reducing custom integration risk for organizations in banking or financial services; security teams should confirm that data gateway policies and connector access controls are reviewed before production use.

Sources: Microsoft Security Blog - Storm-0940 ARTEX Campaign · Microsoft Security Blog - LiteLLM Supply Chain Compromise · Microsoft Security Response Center

What Your Employees Will Notice

  • Teams is measurably faster: Microsoft has published performance improvements across chat switching, meeting join, and mobile responsiveness. Employees who have previously complained about Teams lag may notice the improvement without prompting.
  • Teams Rooms can now join Zoom meetings natively: Employees using a Teams-equipped conference room can join a Zoom meeting using the full room setup - camera, audio, and displays - without needing a personal laptop workaround. This is particularly relevant for client-facing teams.
  • GitHub Copilot is now actionable from Teams: Developers receiving GitHub notifications in Teams can now ask GitHub Copilot to act on them directly in the conversation thread, turning a notification into a pull request without leaving Teams.
  • PowerPoint shows a clear “Viewing Only” label: When a file is shared as view-only, users will see an explicit message bar explaining why they cannot edit and who to contact, reducing help desk calls about locked files.
  • Copilot in Excel on iPhone can edit workbooks: Mobile Excel users with Copilot licenses can now ask Copilot to make changes to their workbooks using plain language, with Copilot continuing to work in the background after the user navigates away.
  • SharePoint now supports custom HTML pages: Authors can create rich, interactive intranet pages using HTML - either hand-crafted or generated by Copilot - within the existing SharePoint publishing workflow.
  • Copilot Chat now generates interactive mini-apps (App Blocks): Users with Microsoft 365 Copilot licenses can ask Copilot to build working calculators, dashboards, forms, and comparison tools directly inside a chat session - going beyond text responses to interactive experiences.

Sources: Microsoft Teams Blog - Performance Update · Microsoft Teams Blog - Cross-Platform Meeting Connect · M365 Roadmap

What Your Help Desk Should Expect

  • Increase in email and calendar application failures: EWS retirement is actively causing errors. Expect tickets from Mac users whose Apple Mail or classic Outlook for Mac has stopped connecting, as well as reports from users of affected Outlook add-ins and older Windows Outlook clients. A communication to affected user groups should go out promptly.
  • Third-party backup application alerts: IT and operations teams may receive alerts from email backup vendors whose products relied on EWS. These are not isolated failures; they reflect the protocol being turned off tenant-wide.
  • Teams Room and cross-platform meeting questions: Employees discovering the new Zoom interoperability in Teams Rooms may generate configuration and capability questions; front-line IT staff should be briefed on the feature before it is widely encountered.
  • Copilot feature questions from mobile Excel users: The new iPhone editing capability in Copilot for Excel is generally available and may generate curiosity-driven tickets about what it can and cannot do.
  • Questions about AI-generated SharePoint sites: Once Copilot SharePoint Site Builder enters preview in October, IT governance teams may receive questions about who can create sites this way and whether approval workflows apply.

Sources: Exchange Team Blog - EWS Retirement · Microsoft Teams Blog - Cross-Platform Meeting Connect · M365 Roadmap

Cost & Licensing

  • Teams Rooms cross-platform Zoom interoperability is included in existing Teams Rooms licensing - no additional cost to join Zoom meetings from a Teams Room. Organizations that have been purchasing add-on solutions to bridge this gap should review whether those third-party tools remain necessary.
  • Copilot App Blocks and Excel mobile editing are available to users with Microsoft 365 Copilot licenses. If your organization has Copilot licenses deployed only to a subset of users, this is a good time to evaluate whether additional seats are warranted based on demonstrated productivity use cases.
  • Power Platform Admin Plugin for Cowork is now generally available and is aimed at reducing the IT labor cost of governance queries across Power Platform. Organizations paying for manual Power Platform audit processes should evaluate whether this displaces some of that effort.

Sources: M365 Roadmap - Copilot App Blocks · Microsoft Teams Blog - Cross-Platform Meeting Connect · Copilot Studio Blog - Power Platform Admin Plugin

Planning Horizon

  • Immediate - Storm-0940 AI-driven supply chain compromise: Authorize your security team to conduct an emergency audit of all third-party remote management and IT tooling integrations with Microsoft 365, with particular urgency on ConnectWise and similar platforms.

  • Immediate - LiteLLM supply chain credential theft: Direct your development teams and any AI solution vendors to confirm they are not running LiteLLM 1.107.0 and to produce or request a software bill-of-materials for AI tooling in use or in development.

  • Within 30 days - Exchange Web Services (EWS) retirement: Approve an inventory and migration project to identify all applications dependent on EWS and transition them to supported protocols before further disruption reaches more users or backup systems.

  • Within 30 days - ASP.NET Core and .NET vulnerability patching: Confirm with your IT or development team that all .NET and ASP.NET Core environments have received current security patches, particularly for systems handling regulated or customer data.

  • Within 30 days - Intune at Microsoft Ignite 2026: Assign IT leadership to review Ignite session content on endpoint management and AI security innovations to identify capabilities that belong in the 2027 technology roadmap and budget.

  • Within 60 days - Teams Rooms cross-platform Zoom interoperability: Evaluate which conference rooms and user populations will benefit most, and determine whether any existing third-party interoperability subscriptions can be retired.

  • Within 60 days - Copilot SharePoint Site Builder: Decide whether AI-generated SharePoint site creation requires governance guardrails - such as approval workflows or naming standards - before the feature reaches general availability in December.

  • Within 90 days - Hybrid access policy redesign guidance: Use Microsoft’s updated design guidance to schedule an identity policy review with your security team, particularly to account for AI agents acting on behalf of users - a gap that existing Conditional Access policies may not yet address.

Sources: Microsoft Security Blog - Storm-0940 ARTEX Campaign · Exchange Team Blog - EWS Retirement · Microsoft Security Response Center

If You Take No Action

On the Storm-0940 / ARTEX nation-state attack: If your organization uses ConnectWise or similar remote management tools integrated with Microsoft 365 and does not audit third-party access scopes, you are carrying an unquantified credential-exposure risk right now. Nation-state actors have demonstrated they can move from initial access to widespread M365 account compromise faster than traditional detection tools flag. For organizations subject to HIPAA, SOC 2, or CMMC, an undetected breach of this type could trigger mandatory notification obligations and insurance coverage disputes.

On the LiteLLM supply chain compromise: AI development is accelerating inside most organizations, often with limited security oversight of open-source dependencies. If no one is maintaining a software bill-of-materials for AI tooling, you cannot confirm whether compromised libraries are running in your environment today. Credential theft from a developer or admin workstation can cascade into broader access across Microsoft 365 and connected systems.

On EWS retirement: Applications that depended on this protocol are breaking now, not at a future date. Organizations that delay action will see continued failures in email clients, add-ins, and backup systems. For organizations with email archiving obligations under HIPAA, SEC, or state data retention laws, a backup tool that has quietly stopped working is a compliance liability that may not surface until an audit or litigation hold request.

Sources: Microsoft Security Blog - Storm-0940 ARTEX Campaign · Microsoft Security Blog - LiteLLM Supply Chain Compromise · Exchange Team Blog - EWS Retirement