cloud vulnerability

Microsoft has assigned CVE-2026-32173 to an Azure SRE Agent information disclosure vulnerability, signaling that the company considers the issue real, security-relevant, and important enough to track in its public vulnerability guidance. The key question for defenders is not simply whether the...

Microsoft’s security tracking has assigned CVE-2026-24299 to an information disclosure vulnerability in Microsoft 365 Copilot, and the most important detail for defenders is not a flashy exploit chain but the advisory’s own signal of confidence. In Microsoft’s terminology, that confidence metric...