Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes

thehackernews.com Oct 6, 2026

Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users’ Mailboxes

Curated by Shubham · TechCapsules · Oct 6, 2026

AI-summarised brief · reviewed before publication

Microsoft issued out‑of‑band patches for a high‑severity flaw (CVE‑2026‑96940) in Exchange Server that allows authenticated attackers to elevate privileges and read other users’ mailboxes within the same organization. The vulnerability, rated 8.8 on CVSS, does not enable cross‑tenant access. Microsoft has already fixed Exchange Online, so those users need not act, but on‑premises customers must install the updates. The flaw was discovered by researcher Jan Mitchell, and Microsoft flags it as “Exploitation More Likely.”

💡 Why It Matters

· The patch protects internal mail traffic from privilege‑escalation attacks that could expose sensitive corporate communications.

Capsules Microsoft

Read full article on thehackernews.com

“Life is too short to support Windows users”: Microsoft engineer responds, says…

Microsoft Distinguished Engineer David Fowler rebutted a viral X post claiming Windows is unworthy for developers, citing that 49.5 % of professional developers use Windows, per Stack Overflow’s 2025 survey. Fowler noted that while startup and Big‑Tech developers lean toward macOS and Linux, many still rely on Windows for .NET, C#, game development, and enterprise workloads. Microsoft continues to invest in Windows Subsystem for Linux (WSL), expanding Linux containers and AI tooling to attract a broader developer base.

💡 The debate underscores how Windows remains the dominant platform for a sizable developer segment, yet the industry’s shift toward Unix‑based tools drives Microsoft’s strategic focus on hybrid environments.

microsoft.com · Oct 6

How Power Platform helps businesses build AI into existing apps

Microsoft announced that its Power Platform and Power Apps will enable organizations to embed AI into existing applications, data, and automations without rebuilding from scratch. The platform supports hybrid authoring, allowing users to combine coding, agents, and Copilot Cowork with Power Apps Studio. This approach promises faster idea-to-solution cycles, broader employee participation, and maintained governance. The upcoming Power Platform Community Conference in Las Vegas will showcase these capabilities and outline next‑step AI transformations.

💡 By integrating AI directly into trusted business tools, companies can accelerate innovation while preserving control, turning routine workflows into intelligent, data‑driven actions.

pcworld.com · Oct 6

Windows 11 26H2 isn’t exciting, but it does fix one real problem

Microsoft released Windows 11 26H2 last week, delivering modest but tangible performance gains. The update reduces RAM consumption, with users reporting up to 2 GB less usage on 16‑GB laptops and similar drops on systems with 48 GB of memory. It also expands the Low‑Latency Profile, now available to most PCs, which accelerates the Start menu, search, and app launches by temporarily boosting CPU clock speeds. While the changes are incremental, they target older or low‑spec machines, potentially extending their usable life. The company will discuss further optimizations at its October 7 event.

💡 By trimming memory usage and unlocking low‑latency boosts, Microsoft addresses long‑standing complaints about Windows 11’s resource demands, offering a clearer path for users with aging hardware to keep up with modern software.

windowslatest.com · Oct 6

EU tried to escape “Microslop,” but its own staff hate the Microsoft…

The European Commission has trialed Element Pro, a self‑hosted alternative to Microsoft Teams, since summer as part of a digital‑sovereignty push. Despite its promise of data control, EU staff have largely rejected it, with one official calling it “absolute sht” and another questioning its added value. Teams remains the Commission’s primary communication tool, and the backlash highlights the difficulty of replacing a deeply entrenched, resource‑intensive platform. The criticism underscores the tension between sovereignty goals and user experience.

💡 The EU’s struggle to find a viable Teams replacement exposes the limits of open‑source solutions in high‑stakes government environments. It signals that achieving digital sovereignty may require more than policy, demanding robust, user‑friendly alternatives that can match established services.

gamedeveloper.com · Oct 6

Report: Ninja Theory lays off workers after failing to spin off from…

Ninja Theory, the studio behind Hellblade and the upcoming Senua title, announced layoffs after Microsoft’s Xbox Game Studios failed to secure a buyer or independent status for the company. The developer, acquired by Microsoft in 2018 for $117 million, has been part of a broader Xbox “reset” that cut 3,200 jobs across the division. While Undead Labs successfully spun off, attempts to divest Ninja Theory collapsed, prompting the studio to reduce staff. Employees on LinkedIn reported job risks, with no specific number of positions disclosed. The move signals a shift in Microsoft’s first‑party strategy.

💡 The layoffs underscore Microsoft’s tightening focus on core first‑party titles, potentially reshaping the future of high‑profile IPs like Hellblade.

windowscentral.com · Oct 6

Xbox Elite Controller Series 3 specs appear in a Design Lab slip‑up…

A design‑lab document mistakenly released by Microsoft revealed details of the upcoming Xbox Elite Controller Series 3, confirming a range of hardware upgrades. The leak shows a revised ergonomic shell, interchangeable thumbsticks with magnetic attachment, a new haptic feedback system, and a built‑in rechargeable battery offering up to 40 hours of play. It also lists a detachable paddle module, Bluetooth 5.2 connectivity, and a customizable OLED display for real‑time profile switching. The controller will retain the modular accessory ecosystem introduced with the Series 2, while adding a USB‑C port for faster charging. The document, intended for internal review, was posted on a public Design Lab page before being removed, prompting immediate coverage from Xbox‑focused journalists.

💡 The reveal confirms Microsoft’s push to blend premium tactile features with next‑gen connectivity, positioning the Elite Series 3 as a flagship accessory that could set new standards for competitive gaming hardware.