Modern Work Weekly — Week of 2026-07-14
A light data week dominated by MSRC vulnerability disclosures for gawk and node-tar, plus an OWA Light retirement announcement that Exchange Server admins need to plan for.
Read digest →A light data week dominated by MSRC vulnerability disclosures for gawk and node-tar, plus an OWA Light retirement announcement that Exchange Server admins need to plan for.
Read digest →Copilot Cowork goes GA worldwide with Claude Sonnet 5 and Sales Agent in tow, while five new CVEs land in AI and TLS libraries that may touch your supply chain.
Read digest →Six CVEs land across libxml2, GNU gzip, attr, and acl for Linux-adjacent workloads, Intune's June release doubles down on AI-era endpoint hygiene, and a malicious Chromium extension spoofing Perplexity AI is actively redirecting browser search. EWS retirement remains on track for its October 2026 deadline.
Read digest →EWS retirement hits its final phase with a hard October 2026 deadline, Intune Suite advanced capabilities land in M365 E3/E5 by August 1, and three Entra ID legacy auth controls are heading for retirement — this week is heavy on deadlines and migration obligations.
Read digest →Teams Live Events dies June 30 — migrate now. Exchange Server OWA has an active XSS CVE. Meanwhile, Purview ships posture reporting, Copilot Studio goes fully agentic with computer-use GA, and Entra tackles shadow tenant sprawl.
Read digest →CVE-2026-42897 demands immediate patch action on all on-prem Exchange deployments, while Teams Live Events hits its June 30 retirement deadline — but this week also delivers real capability unlocks across AI agent governance, Purview posture reporting, and Entra multi-tenant visibility.
Read digest →