SecurityWeek’s weekly cybersecurity news roundup offers a concise overview of important developments that may not receive full standalone coverage yet remain relevant to the broader threat landscape.
This curated summary highlights key stories across vulnerability disclosures, emerging attack methods, policy updates, industry reports, and other noteworthy events to help readers maintain a well-rounded awareness of the evolving cybersecurity environment.
Here are this week’s highlights:
Microsoft releases cloud patches
Microsoft has released patches for nine vulnerabilities in Entra ID, Azure Cosmos DB, Power Automate, Copilot Studio, Azure Active Directory B2C, Fabric, Azure AI Language, and Discovery Studio. The fixes were deployed server side and require no action from Microsoft’s customers.
Project Watershed 250: cybersecurity capabilities for Texas water utilities
White House and Texas’ Governor have launched Project Watershed 250, a federal-private sector effort to provide water and wastewater utilities in Texas with access to free cyber defense resources and harded then against cyberattacks from China, Iran, and other hostile foreign adversaries.
Minnesota county paid $128K to ransomware group
Winona County in Minnesota reportedly paid a $128,539.57 ransom to restore services and protect personal information affected by a January 2026 ransomware attack. In April, the county fell victim to a second ransomware attack, claimed by the InterLock gang, but it is unclear who was responsible for the January incident.
Exploit published for Exchange flaw affecting over 21,000 servers