Loading story…
Microsoft confirmed that the Windows 11 cumulative update KB5079473 is causing Microsoft account sign-in failures in several Microsoft applications, including Teams, OneDrive, Edge, Excel, Word, and Microsoft 365 Copilot. Affected users are shown a misleading message stating that the device is not connected to the Internet, even when connectivity is working, preventing normal sign-in activity across those services.
The issue has been linked to a specific network connectivity state and appears to affect Windows 11 systems on versions 24H2 and 25H2 that use Microsoft accounts, while organizations authenticating with Entra ID are not impacted. Microsoft said it is developing a permanent fix and, in the meantime, recommends restarting affected PCs while they remain connected to the Internet, noting that the problem can return if a device is rebooted without an active connection.
See real exploitation activity before you spend the cycle.
4 events from the most recent confirmed update back to the earliest known activity.
Oracle released an out-of-band fix for CVE-2026-21992, a critical unauthenticated remote code execution flaw affecting Oracle Identity Manager and Oracle Web Services Manager in Oracle Fusion Middleware. The vulnerability was described as especially dangerous because compromise of identity infrastructure could enable persistent enterprise-wide access.
Microsoft released out-of-band update KB5085516 for Windows 11 25H2 and 24H2 to fix Microsoft account sign-in and apparent internet connectivity issues introduced by KB5079473. The optional update is available via Windows Update and the Microsoft Update Catalog and updates systems to builds 26200.8039 and 26100.8039.
Microsoft said it is investigating the sign-in problem and working on a permanent resolution. As a temporary workaround, the company advised affected users to restart their devices while connected to the internet, noting the issue is tied to a specific network connectivity state and may recur if restarted offline.
Microsoft disclosed that the March 2026 Windows 11 cumulative update KB5079473 can cause Microsoft account sign-in failures in apps including Teams, OneDrive, Edge, Excel, Word, and Microsoft 365 Copilot. Affected users may see a false message saying internet access is required even when connectivity is working; Entra ID-based organizational sign-ins are not impacted.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
9 references tracked. Mallory keeps watching after this page renders.
computerweekly.com
Open sourcetechrepublic.com
Open sourcecybersecuritynews.com
Open sourcecybersecuritynews.com
Open sourcebleepingcomputer.com
Open sourcego.theregister.com
Open sourcewindowslatest.com
Open sourcehowtogeek.com
Open sourcebleepingcomputer.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Microsoft has confirmed that Windows 11 cumulative update **KB5095051** introduced a known issue that can stop Microsoft Office applications from opening when launched from certain third-party programs using **OLE automation**. Affected apps include **Word, Excel, PowerPoint, Access**, and other Office components, and the failure may occur silently with no error message. Reported impacted software includes **CCH Engagement, Workpaper Manager, Dentrix, Softdent, and Zotero**, creating workflow disruptions for organizations that rely on Office integration from external applications. The issue affects fully updated systems running **Windows 11 version 26H1** with **OS Build `28000.2269`**, following updates released on or after June 9. Microsoft said a fix is in progress and will be delivered in a future Windows update, while advising users to open Office apps or documents directly as a temporary workaround; enterprise customers can also contact Microsoft Support for Business for an organization-wide mitigation. Separate reporting on the same update also noted a deployment risk tied to a missing **`boot.STL`** file in installation media that can trigger boot failures with error code **`0xc0430001`** during dynamic update deployment.
Jun 29, 2026
Microsoft's cumulative Windows 11 security update `KB5124008` is reportedly preventing certificate-based Always On VPN tunnels from connecting on some enterprise endpoints running Windows 11 24H2 and 25H2. Administrators using Intune-deployed VPN profiles with RRAS, NPS, and certificate authentication found that uninstalling the update and rebooting restored connectivity, indicating a likely client-side regression; Microsoft had not listed the issue in its known-issues documentation. The failure creates an operational and security tradeoff for affected organizations: pausing or removing the update may restore remote access, but `KB5124008` remediates numerous vulnerabilities, including two elevation-of-privilege zero-days reported to be actively exploited. Enterprises should identify affected Always On VPN clients, test mitigation options, and monitor Microsoft for an acknowledged issue and supported fix before broadly rolling back the security release.
Sep 11, 2026
Microsoft’s Windows 11 cumulative update `KB5094126` is causing serious post-installation failures on some systems after its release with roughly 200 security fixes, including 33 critical flaws and five zero-days. Users reported freezes shortly after boot, black screens, boot loops, BSODs, and repeated BitLocker recovery prompts, including on devices where BitLocker was believed to be disabled. Reports indicate the problems are hitting some HP models particularly hard, with Secure Boot certificate changes and interactions with BIOS/UEFI settings and undersized or crowded EFI partitions emerging as likely factors. The update is also disrupting enterprise and productivity workflows by breaking File Explorer integration for OneDrive and, in some cases, Dropbox and iCloud Drive, while some affected machines reportedly lose LAN access even though internet connectivity remains available. Administrators and users have resorted to Windows Recovery Environment to remove the patch, and some systems reportedly required full Windows reinstalls after recovery complications. A widely shared workaround has been to temporarily disable Secure Boot, complete boot and update recovery, then re-enable Secure Boot after updating BIOS/UEFI firmware, though Microsoft had not formally acknowledged the full scope of the issues in the update documentation at the time of reporting.
Jun 29, 2026