Microsoft's push to secure enterprise environments leads today's coverage, as Fabric extends customer-managed key encryption to transient Spark workloads. We also examine severe privilege vulnerabilities found inside popular Model Context Protocol servers, alongside new collective bargaining frameworks for manufactured home residents in Montana.
Microsoft announced on Saturday that Customer-Managed Key (CMK) encryption for Microsoft Fabric now covers temporary Spark job execution data, including shuffle data and spill files, reaching general availability.
Why it matters
Unencrypted transient storage during data processing has remained a persistent architectural roadblock for life-sciences and financial clients undergoing cloud analytics migrations. Native CMK support across temporary spill files allows regulated tenants to meet strict compliance mandates without engineering complex custom wrapping scripts.
Microsoft expanded its Foundry Agent Service on Saturday with a managed deployment path for containerized code-first agents, providing built-in tracing, persistent memory state management, and an automated Agent Optimizer.
Why it matters
Pro-developer agent builds often stall when transitioning from local sandbox code to production infrastructure due to custom telemetry and state plumbing overhead. Providing a managed container host reduces deployment friction while keeping execution logs within standard Azure operational boundaries.
Microsoft announced that Power Platform source code integration will natively support GitHub alongside Azure DevOps, with public preview scheduled to launch on August 31, 2026.
Why it matters
Unifying low-code solution exports with standard GitHub repositories allows enterprise development teams to apply uniform CI/CD pipelines, code review controls, and automated testing across both pro-code and Power Platform solutions.
Validating the Model Context Protocol (MCP) security gaps targeted by Obsidian Security's recent $85 million raise, a new static analysis of 25 popular MCP servers reveals that over two-thirds execute outbound network requests, read local environment secrets, or spawn subprocesses with unmanaged user privileges.
Why it matters
Connecting AI desktop clients to local MCP servers introduces significant privilege escalation risk if those servers run outside containerized sandboxes. Security architects must enforce network egress limits and strict process boundary rules before approving local developer agent tools.
Attorneys for Dr. Anthony Fauci formally declined a request on Saturday to voluntarily testify before a Senate panel chaired by Sen. Ron Johnson, following a party-line contempt vote by the Homeland Security Committee earlier this month.
Why it matters
The refusal marks the latest escalation in ongoing congressional committee disputes over oversight bounds, Fifth Amendment protections, and subpoena enforcement procedural precedent.
Organized tenant unions in Missoula and Bozeman, Montana, negotiated lease protections and voluntary rent caps with out-of-state corporate mobile home park owners, establishing a grassroots template ahead of the state's 2027 legislative session.
Why it matters
With formal municipal rent controls largely restricted by state statutes, direct collective bargaining by resident associations represents a practical mechanism for protecting low-income housing stock against predatory equity buyouts.
Research released Sunday by Flare shows enterprise identity exposure in infostealer logs reached 16% in late 2025, with Microsoft Entra ID credentials appearing in 79% of infected logs.
Why it matters
Credential dumps recovered from infected personal endpoints are increasingly used to harvest persistent primary session tokens. Hardening Conditional Access with strict device compliance and locations-based access controls remains essential to neutralizing stolen session cookies.
Following the 'Kali365' and 'Greatness' Phishing-as-a-Service platforms tracked earlier this month, researchers at Lexfo have detailed a new active operation utilizing three customized forks of the Evilginx reverse-proxy framework. The attacks incorporate AI-assisted code tweaks to evade Subresource Integrity checks and manipulate Microsoft 365 login flows.
Why it matters
The rapid adaptation of reverse-proxy toolkits makes traditional password-plus-SMS authentication ineffective. Fast-tracking phishing-resistant FIDO2 passkeys and blocking device code flow endpoints are the primary operational defenses against these automated proxy setups.
Independent hardware testing by Tom Moloughney demonstrated that sustained 500-amp draws from 400-volt EVs like the Rivian R2 can cause thermal throttling or physical melting on older Tesla NACS adapters that lack active thermal monitoring.
Why it matters
As automakers roll out high-amperage charging capabilities on non-Tesla vehicles, EV owners must ensure their NACS conversion hardware features built-in thermal cutoff sensors to prevent station plug damage during peak charging sessions.
The City of Boston appointed Shin-pei Tsay as Chief Information Officer on Saturday, combining research, urban mechanics, and municipal IT under a single leadership structure.
Why it matters
Consolidating Boston's municipal data strategy and technology services accelerates civic tech deployment, streamlining public procurement and municipal digital service transformations across the city.
Biotechnology firm Skylark Bio dosed the first pediatric patient in a Phase 1/2 trial testing SKY-GJB2, an adeno-associated virus gene therapy designed to address inherited inner-ear connexin 26 deficiencies.
Why it matters
Because GJB2 mutations represent the leading cause of congenital genetic sensorineural hearing loss, successful gene delivery directly to inner-ear supporting cells could offer a permanent alternative to early cochlear implantation.
Reports confirmed Sunday that Windows 11 mandatory update KB5121003 causes application crashes and driver conflicts with third-party kernel components like inpoutx64.sys, while triggering multiple reboots to update Secure Boot DBX certificates.
Why it matters
System administrators managing Windows endpoints should anticipate user tickets regarding unexpected reboot loops during update cycles and verify third-party kernel driver signatures before pushing KB5121003 broadly.
Data Encryption Mandates Push Analytics Platforms into Native Key Management Enterprise platform adoption in regulated sectors relies heavily on comprehensive Customer-Managed Key support across temporary runtime states and operational storage.
Local System Access Surfaces as the Weak Link in Agentic AI Implementations As autonomous AI agents acquire broader toolsets, default execution permissions and unmanaged protocol servers expose underlying host environments to privilege escalation.
Identity Providers Face Sustained Credential Harvests via AI-Enhanced Toolkits Threat actors are pairing traditional infostealers with AI-customized reverse proxy frameworks to bypass multi-factor authentication and compromise central cloud directories.
High Amperage Thermal Limits Challenge Cross-Standard EV Charging Hardware The transition to universal NACS access is highlighting physical hardware bottlenecks, where continuous high-current draws overwhelm passive charging adapters.
Grassroots Tenant Organizing Shift Focus Toward Local Mobile Home Park Caps Organizing groups in western states are establishing direct negotiation models with corporate park owners to cap rent increases outside traditional municipal legislative channels.
What to Expect
2026-08-22—Power Platform granular Copilot credit tracking and PAYG spending caps enter public preview.
2026-08-31—Native GitHub source code integration for Power Platform scheduled to enter public preview.
2026-09-01—Microsoft Entra ID begins automated passkey registration prompts for eligible SMS and voice MFA users.
2026-10-01—Microsoft initiates gradual shutdown of Exchange Web Services (EWS) for Exchange Online.
How We Built This Briefing
Every story, researched.
Every story verified across multiple sources before publication.
🔍
Scanned
Across multiple search engines and news databases
326
📖
Read in full
Every article opened, read, and evaluated
78
⭐
Published today
Ranked by importance and verified across sources
12
— The Tenant Desk
🎙 Listen as a podcast
Subscribe in your favorite podcast app to get each new briefing delivered automatically as audio.
Apple Podcasts
Library tab → ••• menu → Follow a Show by URL → paste