Google began rolling out a change on October 5, 2026: deleting a Workspace user also deletes the extra calendars they own, such as a shared time-off or service calendar, and suspending a user suspends them. How to find who owns your shared calendars, and the step to add to offboarding.
Microsoft says Outlook on the web and the new Outlook for Windows will block .msix and .msixbundle attachments starting in early November 2026. Most businesses need to do nothing, but anyone who emails Windows app packages should plan an alternative.
Microsoft says its September 2026 security release fixed a record number of vulnerabilities, "close to 1,000," and expects high volumes to continue. A checklist for small offices before the October 13 Patch Tuesday, plus what Exchange Server owners need to know.
Starting in late October 2026, Microsoft Teams will add the paperclip and drag-and-drop to chats with people at other organizations, unless an admin has already set the option. Who is affected, how it relates to fake help-desk chats, and the settings to decide on now.
CISA says a flaw in VIVOTEK camera firmware could let an attacker take over the camera, and a public demonstration exists. VIVOTEK has fixed firmware. Ask your installer to update it and keep the cameras off the internet.
Microsoft says attackers used a Zimbra flaw to plant web shells and collect mailbox data with a single crafted email. Updating closes the hole, but servers exposed before the update need to be checked.
