Microsoft ends license-included Azure VMware, and your reservation is the real deadline
The news: Microsoft published a retirement notice on August 18 for license-included Azure VMware Solution. Sales stop October 31, 2026, and the service retires August 30, 2027.
Why it matters: The 2027 date is not your date, because the bundled VCF benefit ends when your reserved instance expires. After that you buy Cloud Foundation from Broadcom directly, at Broadcom's price, with no bundled option left on Azure. Run over your licensed core count and Microsoft can suspend the private cloud.
What to do: Pull the expiry date and core count on every AVS reservation this morning.
A forged SharePoint token looks exactly like a valid login
CISA added SharePoint flaw CVE-2026-55040 to KEV on August 19, deadline August 21. An unauthenticated attacker can forge a JWT and impersonate any user, admins included. Rapid7 found four chained weaknesses in token validation, and its proof of concept is already hitting honeypots. A forged token produces a successful login, so your auth logs show nothing wrong. Patch, then read admin-level SharePoint activity back to the day that code went public.
GitHub went dark for eight hours and took SSO with it
GitHub was down for 7 hours and 47 minutes on August 17, its second failure this month. The outage reached authentication, SAML and OIDC included, so repositories were not the only casualty. GitHub says both incidents were capacity failures, not bad code or config. Monthly commits went from 1.4 billion in April to 2.9 billion, so the pressure is still building. Name the one deploy you must be able to run with GitHub dark, then test that path this week.
Watch This
Stripe agreed to buy OpenRouter on August 19, the gateway routing requests across 400 models from 80 providers. Developers adopted it to stay neutral between model vendors, and neutrality is harder once the layer has an owner. Find out this week whether anything in production routes through it.
This week, DoGood network members are working two questions at once: who owns the virtualization exit plan, and who owns the AI gateway their developers already shipped. If you run IT or security at a $100M+ company, those are the conversations your peers are having right now.
Know a CIO who needs this? Forward it and they can subscribe here.
Enterprise IT leader at a $100M+ company? Apply to join DoGood.