Google disclosed two Chromoting privilege escalation bugs in Chrome on May 6, one of them Windows-only. Both let a low-privileged process climb to SYSTEM on an unpatched endpoint. Here is what is broken, why this matters more than “just patch Chrome”, and what to check today.
On July 1, 2026, Microsoft folds Intune Suite features into M365 E3 and E5, and E5 customers get Endpoint Privilege Management at no extra cost. Here is what EPM does, what it does not replace, and a practical plan to use it to remove standing local admin rights.
June’s Patch Tuesday closed two BitLocker bypasses, YellowKey (CVE-2026-45585) and CVE-2026-50507, both letting anyone with physical access read a TPM-only encrypted drive. Here is what they mean for lost and stolen devices, and the BitLocker config changes to make now.
Chrome on Windows Just Shipped Two Local Privilege Escalation Fixes: What CVE-2026-7948 and CVE-2026-7994 Mean For Your Endpoints
Endpoint Privilege Management Lands in Your E5 License on July 1: A Practical Plan to Retire Local Admin
YellowKey BitLocker Bypass (CVE-2026-45585): Why TPM-Only Encryption Won’t Save a Stolen Laptop