Microsoft patches SharePoint RCE flaw CVE-2026-45659 across on-premises Server versions · Iranian group MuddyWater uses signed-binary DLL side-loading to hit education and public-sector targets across nine countries · Microsoft Defender for Endpoint can now automatically isolate compromised devices