{
    "version": "https://jsonfeed.org/version/1.1",
    "title": "MSBrief.com - Microsoft News for IT Admins",
    "home_page_url": "https://msbrief.com",
    "feed_url": "https://msbrief.com/feed.json",
    "description": "Curated Microsoft news: Patch Tuesday, CVEs, Azure updates, product launches, and admin insights.",
    "icon": "https://msbrief.com/favicon.svg",
    "authors": [
        {
            "name": "MSBrief.com",
            "url": "https://msbrief.com"
        }
    ],
    "language": "en-US",
    "items": [
        {
            "id": "https://office365itpros.com/2026/10/23/exchange-web-services-final/?utm_source=rss&utm_medium=rss&utm_campaign=exchange-web-services-final",
            "url": "https://office365itpros.com/2026/10/23/exchange-web-services-final/?utm_source=rss&utm_medium=rss&utm_campaign=exchange-web-services-final",
            "title": "Exchange Web Services Enters the Final Mile",
            "content_text": "Exchange Web Services has entered its final mile, and Microsoft is now prompting Microsoft 365 tenants about the need to find and update EWS applications. All is well if the EWS usage report in the Microsoft 365 admin center lists nothing or a set of known applications, but only six months or so is available if some unidentified or unknown apps are listed. Time is running out and April 1, 2027 will come very quickly. What\u2019s your tenant\u2019s status?",
            "date_published": "2026-10-23T07:00:00+00:00",
            "tags": [
                "M365",
                "Admin"
            ]
        },
        {
            "id": "https://www.csoonline.com/article/4239359/php2shell-exposes-the-weakness-in-coordinated-vulnerability-disclosure-2.html",
            "url": "https://www.csoonline.com/article/4239359/php2shell-exposes-the-weakness-in-coordinated-vulnerability-disclosure-2.html",
            "title": "PHP2Shell exposes the weakness in coordinated vulnerability disclosure",
            "content_text": "Two critical vulnerabilities discovered in the widely-used PHP programming language have shaken up enterprises, and the ramifications will take some time to truly understand. But one of the lesser-known stories centers around disclosure. According to The PHP Foundation, several organizations had agreed to a coordinated release detailing the critical flaws and mitigation actions, but cybersecurity firm Chainguard \u201cunlaterally\u201d broke this embargo. This prompted the PHP project to release its",
            "date_published": "2026-10-23T00:43:37+00:00",
            "tags": [
                "Security",
                "Enterprise",
                "News"
            ]
        },
        {
            "id": "https://www.neowin.net/news/unpatched-linux-kernel-vulnerabilities-accidentally-emailed-to-public-mailing-list/?utm_source=rss",
            "url": "https://www.neowin.net/news/unpatched-linux-kernel-vulnerabilities-accidentally-emailed-to-public-mailing-list/?utm_source=rss",
            "title": "Unpatched Linux kernel vulnerabilities accidentally emailed to public mailing list",
            "content_text": "Trend Micro's Zero Day Initiative accidentally posted details of six unpatched Linux kernel flaws to a public mailing list, drawing angry responses. Read more...",
            "date_published": "2026-10-22T23:34:01+00:00",
            "tags": [
                "Tech Press",
                "News"
            ]
        },
        {
            "id": "https://www.thurrott.com/podcasts/windows-weekly/343178/windows-weekly-1006-are-you-lying-to-me-now-paul",
            "url": "https://www.thurrott.com/podcasts/windows-weekly/343178/windows-weekly-1006-are-you-lying-to-me-now-paul",
            "title": "Windows Weekly 1006: Are You Lying to Me Now, Paul?",
            "content_text": "With Leo away, Mikah Sargant joins Richard and Paul to discuss more updates for Windows 11, the first Nvidia RTX Spark computers, OneDrive updates, AI and dev, and XBOX and gaming. The post Windows Weekly 1006: Are You Lying to Me Now, Paul? appeared first on Thurrott.com.",
            "date_published": "2026-10-22T23:11:43+00:00",
            "tags": [
                "Tech Press",
                "Analysis"
            ]
        },
        {
            "id": "https://www.darkreading.com/cyberattacks-data-breaches/microsoft-storm-0940-connectwise-supply-chain-attack",
            "url": "https://www.darkreading.com/cyberattacks-data-breaches/microsoft-storm-0940-connectwise-supply-chain-attack",
            "title": "Microsoft Links Storm-0940 to ConnectWise Supply Chain Attack",
            "content_text": "The China-linked actor used an AI-enabled penetration-testing tool to automate and accelerate its attack on more than 2,200 tenants.",
            "date_published": "2026-10-22T20:42:17+00:00",
            "tags": [
                "Security",
                "Incidents"
            ]
        },
        {
            "id": "https://community.fabric.microsoft.com/t5/Fabric-Updates-Blog/Explore-and-process-multiple-event-types-with-Schema-aware/ba-p/5376384",
            "url": "https://community.fabric.microsoft.com/t5/Fabric-Updates-Blog/Explore-and-process-multiple-event-types-with-Schema-aware/ba-p/5376384",
            "title": "Explore and process multiple event types with Schema-aware Fabric Eventstreams (Preview)",
            "content_text": "Real-time streams rarely contain just one kind of event. A building operations stream, for example, might carry thermostat readings, occupancy updates, air-quality measurements, and badge-reader activity through the same source. These events may share a payload format, but they don't describe the same thing. A temperature field matters to a thermostat event. An employee identifier belongs to an access event. An occupancy count describes something else entirely. Traditionally, processing a mixed",
            "date_published": "2026-10-22T20:01:43+00:00",
            "tags": [
                "Fabric",
                "Data",
                "Analytics"
            ]
        },
        {
            "id": "https://azure.microsoft.com/updates?id=577618",
            "url": "https://azure.microsoft.com/updates?id=577618",
            "title": "[Launched] Generally Available: ABFS Vectored Read for Azure Data Lake Storage",
            "content_text": "ABFS Vectored Read helps compatible analytics engines reduce request overhead for selective reads in Azure Data Lake Storage. By combining nearby file ranges into fewer storage requests and executing reads asynchronously, it can reduce network round trips",
            "date_published": "2026-10-22T18:01:00+00:00",
            "tags": [
                "Azure",
                "Updates",
                "Releases"
            ]
        },
        {
            "id": "https://www.bleepingcomputer.com/news/microsoft/microsoft-shares-how-to-fix-broken-exchange-online-ews-apps/",
            "url": "https://www.bleepingcomputer.com/news/microsoft/microsoft-shares-how-to-fix-broken-exchange-online-ews-apps/",
            "title": "Microsoft shares how to fix broken Exchange Online EWS apps",
            "content_text": "Microsoft says IT admins can re-enable the retired Exchange Web Services (EWS) API in Exchange Online to fix EWS apps that have stopped working. [...]",
            "date_published": "2026-10-22T15:49:32+00:00",
            "tags": [
                "Security",
                "News"
            ]
        },
        {
            "id": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105014",
            "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-105014",
            "title": "CVE-2026-105014 Azure Pipelines Remote Code Execution Vulnerability",
            "content_text": "Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an unauthorized attacker to execute code over a network.",
            "date_published": "2026-10-22T14:00:00+00:00",
            "tags": [
                "Security",
                "CVE",
                "Advisories",
                "Patch Tuesday"
            ]
        },
        {
            "id": "https://devblogs.microsoft.com/microsoft365dev/develop-enterprise-grade-apps-with-sharepoint-embedded/",
            "url": "https://devblogs.microsoft.com/microsoft365dev/develop-enterprise-grade-apps-with-sharepoint-embedded/",
            "title": "Develop enterprise-grade apps with SharePoint Embedded",
            "content_text": "Taking an enterprise application from development to production requires confidence that it can scale, stay reliable, and be governed effectively. Recent SharePoint Embedded updates give developers clearer guidance for making those decisions, from understanding limits and managing throttling to choosing the right permissions.\u00a0 In this blog post, we highlight updates that help you:\u00a0\u00a0 Plan with [\u2026] The post Develop enterprise-grade apps with SharePoint Embedded appeared first on Microsoft 365",
            "date_published": "2026-10-22T12:30:44+00:00",
            "tags": [
                "M365",
                "Developer",
                "Graph"
            ]
        }
    ]
}