“Patch CVE-2026-50481 and CVE-2026-59115 on all M365/Azure tenants within 48 hours and notify customers before they ask.”
Azure AD EoP (CVE-2026-50481, CVSS 9.9) and Entra Provisioning Flaw (CVE-2026-59115, CVSS 9.9) Patched
Microsoft's August Patch Tuesday included CVE-2026-50481, a 9.9-rated Azure Active Directory elevation-of-privilege flaw involving modification of immutable data, and CVE-2026-59115, a path-traversal EoP in the Microsoft Entra Provisioning Service also rated 9.9. Both allow already-authorised low-privilege attackers to escalate privileges over the network, making them high-priority patches for any organisation using Entra ID or hybrid identity. Apply the August 2026 updates; restrict network access to Entra provisioning endpoints as a temporary measure.
Read more →Microsoft 365 Delivered Lowest Quarterly Uptime on Record in Q1 2026 — Resilience Planning Urgent
Microsoft 365 delivered only 99.526% uptime in Q1 2026 — the lowest quarterly figure since analysts began tracking it in 2013 — consuming nearly the entire annual SLA budget in a single quarter, according to IncidentHub analysis. This follows a pattern of automation and change-management failures across 2025–2026. Australian MSPs should review client SLAs, update incident-response playbooks, and evaluate multi-cloud or hybrid fallback communication options.
Read more →67% of AU/NZ ITSPs Now Generating Revenue from AI Products and Services — GTIA Research
New research from GTIA (Global Technology Industry Association) finds that over a third of IT solution providers in Australia and New Zealand are generating up to 10% of their revenue through AI products and services. CRN Australia reports MSPs are actively uncovering AI use cases delivering productivity improvements and customer service enhancements for clients. This signals a growing expectation from Australian SMB clients for MSPs to lead on AI adoption, creating both a revenue and retention opportunity.
Read more →Subscribers get the full “From the Floor” take with every issue — not just the news summary you just read.
Written from 12 years on the helpdesk floor. Always free.