Weekly Security Roundup: Patch Rush, Secrets, and AI Guardrails

by TechHub

This week’s security news spotlights urgent vulnerability fixes, better credential protection, cloud and SaaS baseline upgrades, and practical integrations for identity, compliance, and recovery. Organizations must move quickly to patch risks, especially in Microsoft environments, while juggling the expanding roles—and new risks—of AI in security automation.

Critical Vulnerability Mitigation Across Microsoft Platforms

A SharePoint vulnerability (CVE-2025-53770) allowed unauthenticated code execution through auth bypass. Recent versions received patches, while older systems relied on custom Azure WAF rules. Exchange faced a privilege escalation vulnerability (CVE-2025-53786), remedied by hotfixes and updated trust models. SQL Server saw a denial-of-service risk (CVE-2025-49759) now patched across supported releases. These events reinforce the need for prompt patching, layered defenses, and live monitoring.

AI and Security: Expanding Applications and New Risks

AI is now being used for credential exposure alerts (Entra/AD), automated incident triage in Defender, and open-source supply chain scans (CodeQL, Copilot). However, LLM-generated code can introduce new risks. Microsoft and partners are recommending thorough review and end-to-end AI security, with organizations like Dow sharing how AI has improved threat detection and SecOps workflows.

Advancements in Secret and Credential Management

GitHub Secret Scanning now supports 12 more token types for proactive risk detection. Secret validity checks and push protection in GitHub Advanced Security for Azure DevOps make discovery and remediation easier. Azure DevOps has improved OAuth secret management by only displaying secrets at creation. GitHub’s MCP Server now boosts public repo scanning.

Cloud and SaaS Security Baselines, Forensic Readiness, and Integration

Azure’s updated guides on forensic readiness cover MFA, RBAC, auditing, recovery, and compliance. Third-party SaaS integration guides explain secure setup and consistent permission management for Slack, Trello, and Google. Defender for Cloud now matches compliance for US Government clouds. Queensland, Australia, has improved support for vulnerable groups with a unified MS 365 E5 stack.

Real-Time Enforcement and Advanced Identity Management

Continuous Access Evaluation (CAE) now provides real-time session revocation on Azure DevOps—closing security gaps faster. Developers should update workflows to react to new CAE signals. A new Entra ID guide for Windows Forms shows secure token-based identity setup for Arc-enabled SQL Server.

Application Security, Supply Chain, and Developer Workflows

A new survey shows most companies still deploy code with known vulnerabilities, putting them at risk. CodeQL now supports Kotlin and Rust and offers improved static analysis for JavaScript/React. The Minimus hardened images service adds VEX and Microsoft SSO to improve supply chain and container compliance.

Windows, Disk Encryption, and System Recovery

Microsoft STORM found attackers could chain four BitLocker vulnerabilities in the Windows Recovery Environment to unlock protected drives. The July 2025 patch addresses these design flaws, serving as a reminder of the importance of layered defense and ongoing validation.

Regulatory and Compliance Tools

The Eclipse Foundation has published OCCTET, a free toolkit to help organizations fulfill requirements under Europe’s Cyber Resilience Act. Microsoft Purview eDiscovery adds automated workflows, search upgrades, and audit controls. There are also plain-language guides for small businesses on labeling, DLP, and conditional access.

Other Security News

Malware scanning is now generally available for Azure Government Secret/Top-Secret workloads in Defender for Storage. Microsoft Teams encryption details are clarified, and S/MIME troubleshooting tackles certificate issues. There are new guides for OAuth2 automation in ADF and issuing directory extension claims in Entra ID, plus registration details for Microsoft Ignite 2025 (focused on AI defense and community forums).