MICROSOFT has issued patches for nine vulnerabilities across its cloud and productivity stack, including Entra ID, Azure Cosmos DB, Power Automate, Copilot Studio, Azure Active Directory B2C, Fabric, Azure AI Language, and Discovery Studio. The fixes were deployed server-side and reportedly require no action from affected customers. The coverage notes this as a quiet but broad maintenance of cloud services, aiming to shore up exposed components without user remediation steps.
The roundup also highlights other noteworthy items: approximately 5,000 Dropbox accounts were compromised through abuse of Lenovo’s login verification flow, with attackers registering Lenovo IDs using victims’ emails to access Dropbox accounts; Dropbox states it closed unauthorized sessions. In market activity, Guardio has reached a valuation of $1.1 billion following a $40 million funding round.
Separately, exploit activity around Microsoft Exchange remains active, with CVE-2026-62911 exploits observed against over 21,000 unpatched Exchange servers as of early September 2026.