Runbook Lab newsSecurity news you can act on. Microsoft 365, cybersecurity and AI security for admins, security engineers and MSPs, with kits that turn the fix into a project.https://runbooklabhq.com/ Runbook Laben Thu, 29 Oct 2026 20:28:04 -0000 Thu, 29 Oct 2026 20:28:04 -0000 1440 MkDocs RSS plugin - v1.19.0 None Runbook Lab news https://runbooklabhq.com/ LiteLLM 1.107.0 was poisoned for two hours: check your Python environments AI security A poisoned LiteLLM 1.107.0 on PyPI and Docker ran on every Python start and sent cloud, AI and developer credentials to the attackers. It was online for about two hours on 21 October 2026. How to check and what to rotate. https://runbooklabhq.com/news/litellm-1-107-0-supply-chain-compromise/ Thu, 29 Oct 2026 21:00:00 +0000 Runbook Lab newshttps://runbooklabhq.com/news/litellm-1-107-0-supply-chain-compromise/ SSPR stops using the phone number in the directory on 7 November Identity From 7 November 2026 Entra self-service password reset only accepts methods a user registered. Phone numbers and emails in the directory stop counting. Microsoft says act by 6 November. How to list who is affected, read-only. https://runbooklabhq.com/news/entra-sspr-registered-methods-only/ Thu, 29 Oct 2026 20:00:00 +0000 Runbook Lab newshttps://runbooklabhq.com/news/entra-sspr-registered-methods-only/ Teams turns on file sharing in external chats unless you turn it off Microsoft Teams Microsoft will turn on file sharing in Teams chats with external organisations unless admins have turned it off. Microsoft asks for a decision by the first week of November 2026. https://runbooklabhq.com/news/teams-external-chat-file-sharing-default/ Wed, 28 Oct 2026 12:00:00 +0000 Runbook Lab newshttps://runbooklabhq.com/news/teams-external-chat-file-sharing-default/ Copilot Studio moves agents to new models on 12 November AI agents On 12 November 2026 Copilot Studio moves agents that use GPT-4.1, GPT-4.1 Mini, GPT-5 and some GitHub Copilot harness models to replacement models automatically. Find the agents and test them first. https://runbooklabhq.com/news/copilot-studio-model-retirement-12-november/ Wed, 28 Oct 2026 11:00:00 +0000 Runbook Lab newshttps://runbooklabhq.com/news/copilot-studio-model-retirement-12-november/ Entra will offer passkeys as the first MFA method from November Identity From November 2026 Microsoft Entra lets password-only users register a passkey as their first MFA method instead of SMS or voice. Phase 1 runs from early November 2026 to early January 2027. https://runbooklabhq.com/news/entra-passkey-first-mfa-method/ Wed, 28 Oct 2026 10:00:00 +0000 Runbook Lab newshttps://runbooklabhq.com/news/entra-passkey-first-mfa-method/