Microsoft

Singapore’s cyber agency warned on 28 August that two actively exploited SharePoint Server flaws, scored 9.1 and 8.1, required immediate patches. The warning concerned software that customers run on their own servers, leaving Microsoft to supply fixes while each customer must apply them across its estate.

CISA added two further exploited SharePoint deserialisation flaws to its catalogue on 16 and 22 July, the third such listing in three weeks. For Microsoft, the sequence makes patch delivery and customer maintenance central to confidence in its on-premises collaboration products.

France awarded its Health Data Hub contract to Scaleway on 23 April, with millions of health records due to leave Microsoft Azure from late 2026 or early 2027 if the French provider secures certification. The decision removed a prominent French public-sector reference from Microsoft’s cloud portfolio.

On 15 April, the Open Rights Group cited the US CLOUD Act and Microsoft’s earlier email shutdown for sanctioned individuals when arguing that UK data held by US firms faces jurisdictional risk. Microsoft’s public-sector prospects now depend partly on whether buyers accept that legal exposure.

Microsoft told investors on 29 April that total company headcount would fall year on year in 2027, alongside 20 million paid Copilot seats and expanding capital spending. The forecast tied workforce planning to a company-wide push to sell and deploy new productivity tools.

On 6 July, Microsoft cut 4,800 roles, about 2.1% of its workforce, while chief people officer Amy Coleman described the changes as part of an AI-driven transformation and denied that the technology had directly replaced those roles. That distinction leaves Microsoft’s own employment choices under continued scrutiny.