Security News Update: Can Hackers Steal Passwords Just by Visiting Website on Unpatched Phone? and more

OpenAI shipped its first model rated Critical for cyber OpenAI released GPT-6 Cyber on Thursday and classified it Critical under its Preparedness Framework, the top cyber tier, one notch above where GPT-5.6 Cyber sat. On OpenAI’s own ExploitGym evaluation it scored 48.5% against 32.1% for its predecessor. Access is restricted to vetted Daybreak Red customers …

Tesla’s $40K Dream Truck Is Going Away Tesla’s most hyped vehicle just got evicted from its own factory. What happened: Cybertruck production ends next year. The floor space goes to two-seat Cybercab robotaxis. Why it matters: It’s the third car Tesla has cut this year. Model S and Model X lines already went to Optimus …

Summary Microsoft 365 is retiring the Workforce Insights endpoint in MODS by November 18, 2026. Custom organizational data will now be ingested via the Microsoft 365 profile endpoint. Organizations using non-public attributes must join a private preview and switch before the deadline to continue data uploads. Message ID: MC1542066 Published: Nov 6, 2026 Service: Microsoft …

Summary Microsoft Copilot Cowork now supports Power Platform connectors managed via the Microsoft 365 admin center, allowing centralized control over connector use with third-party apps. Rollout completes by mid-November 2026. Admins should review and configure connector availability, noting that Power Platform DLP policies do not apply to Cowork. Message ID: MC1542062 Published: Nov 6, 2026 …

A Data Privacy message regarding your organization is available within Message Center. The contents of this message can be accessed within Message Center by a Global Administrator or someone designated as a Message Center Privacy Reader. Message ID: MC1540526 Last Updated: Nov 6, 2026 Published Nov 5, 2026 Service: Microsoft 365 suite Tag: GDPR, Admin …

Azure Front Door now supports configurable TLS key exchange policies, including hybrid post-quantum key exchange, to help you prepare for evolving cryptographic threats while meeting your security and client compatibility requirements. Choose a predefined Standard or Enhanced policy, or use a Custom policy to select supported classical and hybrid post-quantum key exchange groups, including the …

Summary Copilot in the designer for cloud flows and agent flows is reaching end of support. Makers will no longer be able to use Copilot within the Power Automate designer for these flow types. Existing cloud flows and agent flows are not deleted, moved, or changed, including flows previously created or edited with Copilot. Users …

Summary Sales Agent in Microsoft 365 Copilot is gaining semantic model support to better interpret CRM data structure, relationships, views, forms, and business terminology. Administrators can fine-tune which CRM tables, relationships, views, and glossary terms are used for grounding responses. The change is intended to improve answer quality for sellers, especially in environments with custom …

Summary Microsoft is retiring Microsoft-provided SMS and voice authentication for sign-ins that don’t support passkeys, which can block MFA completion in affected sessions. The post specifically targets users who have only SMS and/or voice registered and who sign in from browser, device, native app, or embedded experiences that are not passkey-compatible. Administrators should identify impacted …

Summary Opal (Frontier) is a computer use agent experience for Microsoft 365 enterprise users and is governed by admin-controlled Copilot settings. Access depends on Copilot Credits usage-based billing and assignment of spending policies to the users or groups that should be allowed to use it. Users without an assigned spending policy may be blocked from …