Security Digest - June 29, 2026

Daily security intelligence briefing for infrastructure and endpoint management teams. Consolidated from authoritative research, vendor advisories, and community discussions.

• Generated (UTC): 2026-06-29 16:50:04 +00:00
• Lookback window: 7 days

🚀 Top Research & Advisories

• Microsoft 365 Apps RCE Vulnerability Exploited Using a Malicious Excel File - (CybersecurityNews) System.Xml.XmlElement

  Action: Review Office update channel health and security baseline compliance.

🏗 Infrastructure

• CVE-2026-12249 - (CVE.org) Review server hardening and AD security posture.

🛠 Infrastructure & Endpoint Control

• 7 Days: Windows 11 turns five, Ford made a mistake, and Starlink plans direct mobile service - (Neowin) Validate workstation security baseline and update compliance.

• Microsoft Edge gets tons of security features, including AI model that can see your screen - (Neowin) Validate Edge/WebView2 coverage; refresh managed package.

• Microsoft released Windows 11 KB5102558, KB5095615 Setup and Recovery updates - (Neowin) Validate workstation security baseline and update compliance.

• Microsoft Weekly: 5 years of Windows 11, more support for Windows 10, and expensive Xbox - (Neowin) Validate workstation security baseline and update compliance.

• Price Drop: Save 86% on Microsoft Office 2021 Professional Plus lifetime digital license - (Neowin) Review Office update channel health and security baseline compliance.

• Prompt injection vs SQLi: same root cause, worse outlook - (Reddit r/cybersecurity) Review Office update channel health and security baseline compliance.

🩹 Patch Tuesday & Update Experience

• Microsoft released Windows 11 KB5102558, KB5095615 Setup and Recovery updates - (Neowin) New dynamic updates for Windows 11 versions 26H1, 25H2, and 24H2, were released by Microsoft this past week. Read more…

🔍 Quick Links (Watch Items)

• Public PoC Released for Deserialization RCE Vulnerability in Splunk Secure Gateway - (CybersecurityNews)
• Hackers Exploiting Critical Oracle E-Business Suite Vulnerability Actively in Attacks - (CybersecurityNews)
• Microsoft 365 Apps RCE Vulnerability Exploited Using a Malicious Excel File - (CybersecurityNews)
• Critical Gemini CLI Vulnerability Lets Attackers Execute Arbitrary Code - (CybersecurityNews)
• Cybersecurity Jobs/Internships/Bounty Hunting - (Reddit r/cybersecurity)
• Hackers now exploit critical Oracle E-Business flaw in attacks - (BleepingComputer)
• Looking for Practical ISO 27001 / GRC Experience — Junior Support, Shadowing or Remote Assistance - (Reddit r/cybersecurity)
• Is IAM (Identity & Access Management) considered a strong cybersecurity field to be getting into? - (Reddit r/cybersecurity)
• ‘DirtyClone’ Linux Kernel Vulnerability Leads to Root Access - (Reddit r/cybersecurity)
• Which Microsoft certification would YOU pick with a free voucher as a college student? - (Reddit r/cybersecurity)