# IT Daily Roundup: October 9, 2026 > Oct 9, 2026 · #microsoft #android #apple #security Microsoft enforces a Content Security Policy on Entra ID sign-in pages starting mid-October, Bitdefender exposes pre-installed Midnight Mimosa malware on low-cost Android phones, and Apple announced a launch event for October 13. ## 1. Microsoft Will Restrict What Can Run on Entra ID Sign-In Pages Starting mid-October 2026, Microsoft is rolling out a Content Security Policy (CSP) for Entra ID sign-in pages at login.microsoftonline.com. The page will only run scripts from trusted Microsoft CDN domains going forward. Any other JavaScript, including code injected by browser extensions or third-party tools, will be blocked. The change is automatic and requires no tenant configuration. The problem shows up if your organization uses a browser extension or other tool that modifies the login page, such as adding a logo, custom fields, or autofill behavior. Those tools will stop working after CSP enforcement kicks in. Sign-in itself will keep working, but anything depending on injected scripts will not. Microsoft recommends checking the browser developer console for CSP violations (shown in red) before the deadline. > **Why it matters:** This looks like a narrow technical change, but it can catch admins off guard. If something in your M365 login flow stops working around mid-October, check for CSP violations first. For IT admins, the practical step is straightforward: test your sign-in scenarios this week, before something breaks in production. ## 2. Pre-Installed Malware on Low-Cost Android Phones Turns Devices Into Proxy Nodes Bitdefender published an analysis of a campaign called Midnight Mimosa, in which the firmware of low-cost Android phones (including Doogee S200 X and Cubot KINGKONG X) was found to contain malware installed before sale. The malware sits in the system partition under the name `com.android.system.lite`, is signed with a system key, and cannot be removed through normal uninstall. Bitdefender tracked thousands of affected devices across more than 150 countries over roughly two years, with the highest concentrations in Mexico, France, Italy, Germany, Brazil, the US, and Spain. The malware downloads additional modules from a remote server. These modules silently enroll the device in a residential proxy network, simulate ad clicks in hidden windows, and can install further apps without the owner's knowledge. The Play Store is temporarily disabled to bypass Google Play Protect. Thirteen Google Play apps were found to carry the same ad-fraud code and have since been removed by Google. The manufacturers have not explained how the code ended up in their firmware. > **Why it matters:** Budget Android devices bought for warehouse staff, delivery drivers, or temporary employees can carry a hidden risk that is not obvious at purchase. A compromised device can relay corporate network traffic through an external proxy network with no visible sign of it happening. At minimum, keep these devices on a separate network segment from your core infrastructure and periodically audit which system processes are running on them. ## 3. Apple October 13 Launch: What to Know Before Buying Mac Hardware Apple confirmed a product launch for October 13, 2026. The first wave is expected to include a smart home hub with a touch display (6 to 7 inches, Apple's first), a new HomePod mini, and an updated Apple TV 4K. Later in October, new MacBook Pro models are expected with M5 Pro or M5 Max chips and an OLED touchscreen display, a 24-inch iMac with M6 chip in new colors, and an iPad mini with an OLED panel. The iPhone Duo, Apple's first foldable phone, opens pre-orders on October 16 and ships October 23. > **Why it matters:** For businesses planning a Mac purchase, wait three to four weeks. The new MacBook Pro will be the first Mac with an OLED display and a touchscreen. That is a more meaningful hardware change than the typical yearly chip update, and if you were on the fence after the M4 generation, this refresh gives you more to decide with. --- © 2026 ITself s.r.o. · Standard page: https://itself.sk/blog-en/2026-10-09-it-daily-roundup.html