Microsoft Teams

Microsoft is winding down Internet Explorer mode in its Edge browser, the compatibility feature that let companies keep using legacy web apps after Internet Explorer was retired. The news is being reported by tech outlets including Mashable. Many organisations still depend on IE mode for old internal systems, so IT teams are expected to face pressure to migrate those applications before support runs out.

Ryan Roslansky is leaving Microsoft after nearly 18 years with the company and its LinkedIn unit. Roslansky served as CEO of LinkedIn before being promoted last year to lead Office, later taking charge of Microsoft Teams as well. His departure marks the exit of one of the company's most prominent product leaders, and observers are watching how Microsoft will reorganise its productivity and collaboration portfolio.

Microsoft's security team reports that the threat actor group Star Blizzard, a known advanced persistent threat, has refined its phishing and malware delivery methods using a technique dubbed Redflick. Cybersecurity commentators are sharing the report widely, flagging the group's evolving tactics and the risk this poses to targeted organisations.

Microsoft is tracking CVE-2026-73570, a newly disclosed vulnerability that allows unauthenticated command injection on internet-facing mail servers. Because the flaw can be exploited without credentials and targets exposed systems, security teams are watching for signs of exploitation and awaiting patch guidance. Admins of mail infrastructure are being urged to assess exposure while details and fixes are confirmed.

Microsoft's Office and Teams chief is leaving the company, according to a report by The Verge citing a LinkedIn announcement. The departure affects leadership of two of Microsoft's most important workplace products, which have become central to its productivity and AI strategy. The report does not yet detail where he is heading or who will take over his responsibilities.

Microsoft has started removing access to Exchange Web Services, the legacy API long used by applications to connect to Exchange mailboxes, with access disappearing from tenants and no exceptions planned after April. The retirement forces organisations still relying on EWS-based integrations, add-ins and custom tooling to migrate to Microsoft Graph before their connections stop working.

Microsoft researchers have detailed attacks exploiting a Zimbra command injection vulnerability, CVE-2026-73570, in which a single crafted email is enough to run code on the mail server. The documented attacks involve deploying web shells, gaining root access, and stealing cryptographic keys. Security teams running Zimbra are being urged to patch and review their servers for signs of compromise.

A critical vulnerability, CVE-2026-73570 with a CVSS score of 8.9, in Zimbra Collaboration Suite allowed unauthenticated attackers to run operating system commands through its SNMP service. According to Microsoft Security Research, attackers exploited the flaw to deploy web shells and steal mailbox credentials. A patch has been released, and security teams are urged to update affected servers promptly.

IKEA and Microsoft's Xbox brand are teaming up to launch a new gaming collection, blending furniture and accessories designed for gamers. Details on pricing, product line-up and release dates remain limited, but the partnership signals both companies' push into the growing gaming lifestyle market. Coverage so far has focused on what the collaboration might include and when it will roll out.

A tech worker's warning is making the rounds: naming a business unit something like "Software" can lead SharePoint to automatically abbreviate team names to an embarrassing acronym, "BS". The anecdote has struck a chord with people in IT and office work, prompting jokes about naming things being one of the hardest problems in software and a reminder to check how workplace tools auto-generate labels.

IT administrators using Microsoft Intune can fully disable WSL containers on Windows machines, or limit developers to only approved container registries. The capability gives security teams tighter control over what development environments and code sources are permitted on managed corporate devices, an approach being discussed among IT and infosec professionals.