Sticky

Monthly Buzz - July - Password Safe

Forum|Forum|15 hours ago
July 31, 2026
0 replies
24 views

BeyondTrust Communications
Community Manager

Microsoft Security in 2026: Top Vulnerability Trends from the BeyondTrust Microsoft Vulnerabilities Report

In this blog, we’ll break down some of the most noteworthy findings from the report, explore key trends in Microsoft’s vulnerability landscape, and share actionable insights to help security teams fortify their defenses against emerging threats.

Inside the 2026 BeyondTrust Microsoft Vulnerabilities Report: Key Findings & Security Insights

If you only look at the total Microsoft vulnerability volume this year, you might assume that we are entering a period of predictable stability. But as BeyondTrust’s 13th annual Microsoft Vulnerabilities Report reveals, surface-level findings can be deceptive.

This year’s theme, “The Ghost in the Machine,” highlights a significant shift for security teams. While overall vulnerability counts dipped by about 6%, critical severity risks doubled over the past 12 months. At the same time, the rapid rise of autonomous AI agents and machine identities has quietly fractured traditional trust boundaries, creating complex lateral movement paths that traditional patch management cannot solve alone.

In this blog, we’ll break down the most significant findings from this year’s report, dissect the shifting vulnerability landscape across core Microsoft product lines, and outline actionable security strategies to help your organization take proactive action for securing Microsoft environments, and beyond.

About the 13th edition of the Microsoft Vulnerabilities Report

The annual Microsoft Vulnerabilities Report compiles and analyzes a full year of Microsoft “Patch Tuesday” data to provide a holistic view of enterprise software security trends.

Because data is only part of the story, our annual report pairs the numbers with deep-dive strategic commentary from an elite panel of global cybersecurity experts, including Jane Frankland, MBE (Founder of the IN Security Movement, CEO of KnewStart, and best-selling author), Sami Laiho (Senior Technical Fellow at Adminize and Microsoft MVP), David (DJ) Morimanno (Field CTO at Xalient), and many more. Together, these insights offer organizations a roadmap for bridging the gap between vulnerability remediation and identity security infrastructure.

2026 Microsoft Vulnerabilities Report: Key Findings

Total vulnerability count decreases, but critical vulnerabilities double

The headline number shows that total Microsoft vulnerabilities fell slightly from 1,360 in 2024 to 1,273 in 2025. While a 6% decline represents an “average” year of volume stability, severity tells a much louder story.

Under Microsoft’s Security Update Severity Rating System, which ranks vulnerabilities by their worst theoretical outcome, critical vulnerabilities doubled, jumping from 78 to 157. This stark increase represents a major departure from a multi-year decline in critical flaws.

It’s also important to note that a few years ago, Microsoft transitioned from scoring vulnerabilities with its proprietary severity rating system to the most current National Vulnerabilities Database (NVD) Common Vulnerability Scoring System (CVSS) framework. NVD CVSS metrics, however, only registered a modest 8% increase in critical vulnerabilities, highlighting the need for defenders to look at contextual risk over raw technical scores alone.

Elevation of Privilege (EoP) and Remote Code Execution continue to dominate

For multiple years running, Elevation of Privilege (EoP) remains the dominant vulnerability category, accounting for 40% (509) of all vulnerabilities recorded. Remote Code Execution (RCE) is the second most prevalent vulnerability category.

This consistent pattern underscores a fundamental truth: attackers are not just looking for initial access; they want the power to move laterally. Once a foothold is established, escalating privilege to execute commands and pose as a trusted identity is the fastest path to business disruption.

Continue Reading HERE

Strengthen Security and Streamline Access with BeyondTrust

Learn how BeyondTrust Password Safe® and Entitle work together to strengthen credential security while optimizing productivity. This brief covers key outcomes from using these combined solutions, such as reducing risks associated with privileged access, simplifying administrative tasks, and improving user experience.

Download the full solution brief to discover how these integrated solutions help protect your entire identity fabric, ensuring security and compliance in today’s evolving threat landscape.

Key Topics in the Solution Brief

Just-in-Time (JIT) access to reduce risk
Credential rotation, session management, and audit trails
Integration of BeyondTrust Password Safe with Entitle for seamless access management
Compliance enforcement and improved user experience across cloud and on-prem environments

Continue Reading HERE

Customer Case Study

ivision: How ivision Simplifies and Scales Identity Security with BeyondTrust

Latest Available Version

BeyondInsight and Password Safe 26.2.0 - July, 2026

Password Safe Mobile app 1.4.0 -March 2026

Password Safe Cloud Resource Broker 26.2.53.30001 – July, 2026

Beekeepers Hot Topics

PSAutomate Better Aleternitaves

Is there a better alternative rather than using PSAutomate in my RDS services? My main issues with PSAutomate that it does not pass passwords as it is. Instead it drops some characters of the password. I tried using Au3 methods, but unfortunately, I was unsuccessful passing the passwords from the Password Safe in the first place.

Request for Guidance on Retrieving Scanned Server User Details

Dear Team,

We need to retrieve the scanned user account details for servers, either through the BeyondTrust Password Safe REST API or from the Analytics & Reports section in the Password Safe portal.

Could anyone please provide guidance on the appropriate API endpoint or the relevant report that can be used to extract this information? If there is any documentation or recommended approach available, kindly share it for reference.

Your support on this would be greatly appreciated.

Seeking Best Practices for BeyondTrust Password Safe HA & DR Implementation

Hi Community,

We are currently planning a High Availability (HA) and Disaster Recovery (DR) implementation for our BeyondTrust Password Safe environment.

Current Environment

1 Active BeyondTrust Password Safe Appliance in AWS East Region
1 Secondary Appliance available in AWS East Region (planned HA node)
1 DR Appliance available in AWS West Region
Active Directory integration
Azure SSO/MFA integration
Password Cache Server
Terminal Server
No HA or DR currently configured

Our Goals

Configure HA between Primary and Secondary appliances in AWS East.
Configure regional DR in AWS West.
Achieve seamless failover from Primary → HA.
Achieve regional failover from AWS East → AWS West.
Define RTO/RPO targets.
Create an audit-ready DR runbook and testing procedure.
Include failover, failback, and rollback procedures.

Before proceeding with the implementation, we would appreciate guidance from organizations that have already implemented a similar architecture.

Specifically, we are trying to understand:

Does BeyondTrust Password Safe support a true Disaster Recovery (DR) architecture, or is the native capability primarily focused on High Availability (HA)? BeyondTrust documentation discusses both HA/failover and DR considerations, but we would like to understand how organizations have implemented DR in practice.
What is the recommended architecture for a multi-region deployment (Primary → HA → DR)?
Are there any official BeyondTrust KB articles, implementation guides, runbooks, or reference architectures that specifically cover HA and DR setup, failover, failback, and testing procedures?
For organizations that have implemented BeyondTrust DR, what approach did you use and what lessons learned would you recommend?
Are there any common audit findings, pitfalls, prerequisites, or operational considerations that should be addressed before implementing HA/DR?