Microsoft released fixes for CVE-2026-85889, a CVSS 10.0 missing-authentication privilege-escalation flaw in Azure AI Foundry, alongside near-critical elevation-of-privilege bugs in Microsoft 365 Copilot, Azure Database for PostgreSQL, and Azure Cosmos DB. All are cloud-side mitigated with no customer action required, and there is no evidence of in-the-wild exploitation. The cluster lands as an enterprise AI platform security event: it illustrates that agent-building infrastructure is now a mainstream attack surface, which bears on enterprise adoption risk rather than on any single contested financial claim.
191 other tracked developments touching the same claims.