https://threat-digest.pages.dev/Weekly reading aid for Microsoft 365 security, from reviewed public sources.https://threat-digest.pages.dev/2026/w38/https://threat-digest.pages.dev/2026/w38/Wed, 16 Sep 2026 08:00:00 +0000Forty-five items were reviewed between 9 and 16 September, and eleven of them have published exploitation. Five touch Microsoft 365, and none of those five have published exploitation. One publisher supplied 22 of the 45 items, so treat the shape of the week as partly a property of the source mix.https://threat-digest.pages.dev/posts/why-a-weekly-page/https://threat-digest.pages.dev/posts/why-a-weekly-page/Wed, 16 Sep 2026 08:00:00 +0000What Threat Digest is for, and why it publishes once a week instead of streaming every headline.https://threat-digest.pages.dev/posts/when-writing-code-is-free-review-becomes-the-control/https://threat-digest.pages.dev/posts/when-writing-code-is-free-review-becomes-the-control/Wed, 16 Sep 2026 08:00:00 +0000A look inside one lab's agentic software factory shows that once generation costs nothing, the scarce resource — and the real security control — becomes review, provenance, and containment.