# Weekly IT Digest for UK Business IT Managers

• **August 2026 Patch Tuesday – 415 CVEs Including Exploited Zero-Day**: Microsoft released patches for one actively exploited zero-day and 62 critical vulnerabilities this week. Prioritise testing and deployment immediately, particularly for internet-facing systems; this is a mandatory patch cycle.

• **Azure Account Credentials Compromised at Scale**: 3.6 million Azure account records allegedly stolen from major organisations; threat actors are actively targeting cloud identities. Review your Entra ID logs for suspicious sign-ins, enforce MFA universally, and consider conditional access policies blocking high-risk logins.

• **CrowdStrike Falcon AIDR Extends to Copilot Studio and Claude Code Protection**: Falcon Artificial Intelligence and Detection Response now shields Microsoft Copilot Studio agents and Anthropic Claude Code from threats. If you're deploying AI assistants in production, verify your CrowdStrike agent versions cover these new integration points.

• **GitHub Outage Confirms Global Access Issues**: Microsoft confirmed GitHub experienced worldwide downtime this week. Test your git backup and failover procedures now; don't wait for the next incident to discover gaps in your source control resilience.

• **VMware ESX Shell Command Obfuscation Attacks Detected**: CrowdStrike threat hunters identified attacks exploiting shell command obfuscation on VMware ESX environments. Review ESX host logs for suspicious shell activity and ensure your hypervisor estate is fully patched; virtualisation infrastructure remains a high-value target.