6 min read · 14 sources

Microsoft spent Monday fighting a widespread Microsoft 365 outage that started with Exchange Online and metastasized into Teams, SharePoint, OneDrive, Purview, and Defender XDR. Incident EX1464935 traces back to a core authentication configuration problem, and Microsoft is still rolling out mitigation across affected infrastructure. If your Monday was spent explaining to a CTO why email was bouncing and SSO was flaking out, this one’s for you.

The bigger story underneath the outage: the authentication layer is now the single point of failure for the entire Microsoft 365 estate. One bad config, and everything from mail to file sync to security tooling goes dark. That’s a fragility worth designing around, not hoping away.

OpenAI will cut off Cursor’s access to its coding models on November 12, giving customers roughly 10 weeks to switch models or platforms.

Exchange Online Outage Takes Down Half of Microsoft 365

Source: bleepingcomputer.com ↗

The Exchange Online outage started as email delays and authentication errors, then spread to Teams, SharePoint, OneDrive, Purview, and Defender XDR. Microsoft traced the disruption to an authentication and protocol connectivity failure pattern affecting tens of thousands of users.

The company is analyzing telemetry to identify the root cause and validate remediation options, with users seeing gradual recovery by late Monday. For SREs, the lesson is blunt: when auth breaks, everything downstream breaks with it. If you’re running Microsoft 365, this is the kind of incident that should prompt a hard look at your own dependency on the platform’s authentication path.

Cursor Loses OpenAI Models in November - Enterprises Have 10 Weeks to Migrate

Source: cio.com ↗

OpenAI will stop providing its coding models to Cursor on November 12, 2026, following SpaceX’s acquisition of Cursor parent Anysphere. The move stems from concerns about SpaceX violating OpenAI’s terms of service, part of a broader legal dispute with Elon Musk.

Enterprises have roughly 10 weeks to migrate to alternative models, which requires validation and prompt retuning due to model differences. The bigger lesson here is vendor dependency: model availability inside AI tools can change because of acquisitions, contracts, competition, or regulation. Multi-model support isn’t a nice-to-have anymore - it’s the difference between a smooth transition and a frantic rewrite.

McKesson Breach: $55 Million Ransom for Millions of Patient Records

Source: techcrunch.com ↗

ShinyHunters breached McKesson’s cloud-hosted Snowflake and Salesforce environments via phishing and social engineering, stealing millions of patient records including diagnoses, medications, and Social Security numbers. The group demands a $55 million ransom.

McKesson confirmed the breach affecting its oncology, multispecialty, and medical-surgical units, with intermittent service degradation but no ongoing unauthorized activity. The attack pattern here is worth noting: phishing to get in, then lateral movement across cloud-hosted data stores. If your Snowflake or Salesforce instances aren’t behind MFA and strict network policies, this is your wake-up call.

The Balkanization of Virtualization: VMware's Slow-Motion Exit

Source: theregister.com ↗

VMware’s 20-year virtualization market leadership will end by October 2027, with Broadcom focusing only on 10,000-30,000 VCF customers out of 350,000. Three deadlines are expected to accelerate exits: November 22, 2026 (third anniversary of acquisition, expiring multi-year subscriptions), March 31, 2027 (VCSP contract expirations), and October 11, 2027.

Broadcom no longer sells vSphere/vCenter standalone, pushing customers to the more expensive VCF bundle. Rivals generally acknowledge that VMware remains technically difficult to match, but the pricing pressure is real. If you’re on vSphere and haven’t evaluated alternatives yet, the clock is ticking - and it’s not a slow clock.

Why IT Projects Still Fail: The 31% Problem

Source: cio.com ↗

PMI’s 2026 report shows 31% of complex projects fail to achieve intended benefits, and the culprits are familiar: unclear success metrics, weak business ownership, poor prioritization, and under-resourcing. The article argues that AI can actually amplify these problems by accelerating output faster than organizations can review or absorb it.

The specific gap: small and midsize projects often lack trained project managers, with business analysts leading without proper expertise. CIOs can improve success rates by assigning professional project managers who can coordinate resources and implement governance. AI won’t fix bad project management - it’ll just make the bad decisions faster.

Tailscale Expands from VPN to Full Connectivity Platform

Source: networkworld.com ↗

Tailscale announced a broader connectivity platform at its Tailscale Up conference, extending its identity-based networking beyond VPN access. New services include DNS Filtering by Control D, Tailscale PAM (privileged access management in beta), Aperture AI gateway (GA), Aperture Plus browser-based access, Tailcat open-source mesh network, and developer APIs/SDKs.

The platform ties access to device/user identity rather than IP addresses, applying policy-based controls. For teams already on Tailscale, this turns a VPN into a full zero-trust connectivity layer. For everyone else, it’s a sign that the VPN market is consolidating into identity-centric platforms.

Google Workspace Adds OneDrive Data Import, Free

Source: workspaceupdates.googleblog.com ↗

Google made its advanced OneDrive migration tooling generally available directly in the Workspace Admin console at no additional cost. Admins can migrate multiple batches concurrently while preserving permissions, with automatic speed adjustment to match Microsoft licensing tiers.

A planning utility estimates source-data size and migration timelines before the move begins. Available now for Business, Enterprise, Education, and other editions. If you’ve been putting off a OneDrive-to-Google migration because of the tooling cost, that excuse just evaporated.

Salesforce DevOps Center Goes Native

Source: salesforceben.com ↗

Salesforce’s Next Generation DevOps Center is now natively available in production instances, replacing the managed package (which must be disabled first). The new app features a five-step workflow: create work item, commit changes, create review, flag as ready to promote, and promote changes.

It includes AI-powered actions and runs baseline test suites on each promotion as quality gates. For Salesforce teams still using change sets, this is the modern path - and the native availability removes the managed package friction.

OpenTelemetry Graduates: Now What?

Source: cncf.io ↗

OpenTelemetry achieved CNCF graduated status in May, joining Kubernetes and Prometheus. The project merged OpenCensus and OpenTracing in May 2019, providing standardized APIs for traces, logs, and metrics with the Collector. It’s the second-highest velocity CNCF project with over 12,000 contributions from 2,800+ companies.

Profiling was added as a new signal, with OpAMP and OTel Operator expanding the ecosystem. Graduation confirms OpenTelemetry is production-ready - if you haven’t adopted it, the excuse of “it’s not stable enough” is officially dead.

Quick Hits: Meraki AI Support, Linux Networking, Agent Package Manager, Obsolete Macs

Source: community.cisco.com ↗

Meraki admins can now start Client VPN and switching support cases directly from the Dashboard’s AI Assistant. The assistant analyzes the environment, suggests troubleshooting steps, and generates a case summary for approval before sending it to Meraki support.

For a deep dive, this walkthrough of the Linux 7.1 kernel network subsystem traces an IPv4/TCP packet over Ethernet from the network card to a server blocked in recv() and back out again. The kernel handles four layers (HTTP, TCP, IP, Ethernet), each solving one problem with a header - and it never parses HTTP; it delivers a byte stream to applications.

Agent Package Manager (APM) is a dependency manager for AI agents, declaring skills, prompts, instructions, plugins, and MCP servers in an apm.yml file. It uses lockfiles for reproducibility and apm-policy.yml for governance, managing multiple agent targets (Copilot, Claude, Cursor, OpenCode) with reusable skill packages. If you’re running AI agents in production and can’t answer “what’s actually installed in them,” this addresses that audit question.

Finally, Apple added three Macs to its obsolete products list: the 2018 Retina MacBook Air, 13-inch 2018 MacBook Pro (four Thunderbolt 3 ports), and 13-inch 2017 MacBook Pro (two Thunderbolt 3 ports). These devices are no longer eligible for repairs, though battery replacements may still be available for up to 10 years. If you’re still running a 2018 MacBook Air as a daily driver, it’s time to start shopping.