Blog

What Changed This Quarter: Microsoft 365, Teams, RingEX, 3CX, and Grandstream (April–July 2026)

Every quarter we review the security patches and feature changes rolling out across the communications and productivity stack most of our clients run: RingEX, 3CX, Grandstream desk phones, Microsoft 365, Dynamics 365, and Teams Premium. Here’s what mattered this cycle, and what we’re keeping an eye on for the next one.

The critical items

Three issues this quarter had public exploit code or confirmed active exploitation, which is why they jumped the queue ahead of everything else:

Grandstream GXP1600 series desk phones had an unauthenticated remote code execution vulnerability (CVE-2026-2329, CVSS 9.3) with public exploit code available. The fix is firmware 1.0.7.81, and any internet-facing or unsegmented handsets are the priority.

3CX shipped a June 5, 2026 hotfix for a third-party web server configuration vulnerability affecting self-hosted deployments reachable from the public internet. 3CX-hosted instances were patched automatically; self-hosted admins needed to apply the update via the Admin Console.

Microsoft 365 / Windows had two: a BitLocker bypass with a public proof-of-concept (CVE-2026-50661), and an actively exploited AD FS / SharePoint privilege escalation flaw (CVE-2026-56155). Both are addressed in the July 2026 cumulative security update.

A few high-severity items rounded out the list, including a Linux kernel privilege escalation and an HTTP/2 denial-of-service flaw affecting 3CX’s underlying infrastructure, and two Teams for Android vulnerabilities — one allowing remote disclosure of auth tokens with no user interaction.

Feature and licensing changes worth knowing about

Security wasn’t the only story this quarter:

• Microsoft 365 rolled out its July 1, 2026 licensing refresh — Business Premium held its price while doubling mailbox storage, and E3/E5 both picked up new security and management features. A new E7 tier launched above E5, the first new top tier since 2015, and Entra Conditional Access for Agents now requires an M365 Agent or E7 license — relevant for anyone piloting AI agents.
• Dynamics 365 made its modern UI the default (the classic toggle is gone) and is rolling out AI agents across Sales, Customer Service, and Field Service as part of its 2026 release wave 1.
• Teams Premium got narrower: as of April 1, 2026, Places and advanced webinar/town hall features moved into core Teams Enterprise. Premium now differentiates mainly on advanced meeting security, branding, and AI features. Anyone who bought Premium before April 1 keeps legacy features until renewal.
• RingEX added AI Receptionist text replies, account-level spam controls, and a real-time call queue dashboard, among other desktop app updates.
• 3CX continues shifting toward its browser-based PWA client over the Electron desktop app, which shrinks the overall attack surface.

A quick note on subprocessors

Every vendor in this stack relies on third-party companies — cloud hosting providers, AI model providers, support and analytics vendors — to help deliver their services. Under GDPR and similar frameworks, these are called subprocessors, and vendors that handle customer data are generally required to disclose who they are and notify customers before adding new ones.

Here’s where each vendor publishes its current list, since these change more often than most people expect:

• Microsoft maintains its Online Services Subprocessor List on the Service Trust Portal (sign-in required). Notably, OpenAI was added as a subprocessor for Microsoft 365 Copilot in June 2026, live as of July 9, 2026 — worth knowing if your organization has Copilot enabled.
• RingCentral publishes its list at ringcentral.com/legal/dpa-subprocessor-list, broken out by product (RingEX, RingCX, RingSense). Mitel’s MiCloud Service is End Of Lifed as of July 2026.
• 3CX discloses subprocessors through its Data Processing Addendum; customers are notified at least 30 days before a new subprocessor is added and can object on data-protection grounds.
• Grandstream doesn’t publish a dedicated subprocessor list in the same format — as a device manufacturer rather than a cloud service, its privacy statement covers third-party service providers (IT management, payment processing, cloud storage) more generally rather than through a GDPR-style subprocessor disclosure.

If your organization has data-residency or compliance requirements tied to any of these platforms, it’s worth checking the current list directly rather than relying on a point-in-time summary like this one — subprocessor lists are amended on their own schedule, independent of the security and feature updates above.

Bottom line

Nothing this quarter requires a full outage window, but the Grandstream and Microsoft items are exploited-in-the-wild or public-PoC issues that shouldn’t wait. If you’re a client and haven’t heard from us about your specific environment yet, reach out — we’re working through confirmations vendor by vendor.

This post reflects publicly available information as of July 17, 2026. Always confirm current patch status directly in each vendor’s admin console.

https://cloudogre.com/q2-2026-microsoft-365-teams-ringex-3cx-grandstream-security-review/

Released just days ago, 3CX V20 Update 7 marks a major leap forward for enterprise communications — delivering enhanced reliability, performance, and integration potential. Far more than a feature upgrade, this release reimagines what a PBX can be in a modern cloud environment.

With built-in System Watcher monitoring, faster and encrypted backups, Amazon S3 support, and extended database connectors for analytics, 3CX now offers the performance and resilience CIOs expect from mission-critical infrastructure. But the real story is how these features unlock new strategic value when integrated with Microsoft Dynamics 365 and Copilot.

Transform Voice into Action with Dynamics 365

In most organizations, phone systems remain siloed from the tools that power sales, service, and operations. That changes with 3CX V20 U7.

When paired with Dynamics 365, inbound calls can surface customer records instantly. Outbound interactions can be logged automatically. AI-powered transcripts and summaries generated by Microsoft Copilot can populate fields in real time, turning conversations into actionable data.

This transforms your PBX from a passive communication tool into an active data and workflow engine — fueling better decision-making and improving customer experiences without adding manual steps.

Amplify Your PBX with Copilot Studio Automation

With Copilot Studio, you can extend this intelligence even further. Voice data from 3CX can now trigger automated workflows, sentiment analysis, or predictive recommendations across your business systems.

Instead of managing calls as isolated events, you can orchestrate them as part of a larger digital process, automating routine tasks and delivering insights where they’re needed most — all without replacing your existing telecom infrastructure.

Reliability and Familiarity, Modernized

For CIOs concerned about risk, V20 U7 keeps the reliability of a traditional PBX front and center. Native service monitoring and auto-recovery reduce downtime. New storage and encryption options improve compliance posture. And faster data exports provide near-real-time visibility into system and call performance.

You get the trusted reliability of a phone system — now with the intelligence and agility of a cloud platform.

Competitive Advantage Through Integration

The organizations that thrive in the coming decade will be those that treat communications not as a utility, but as a strategic layer of their data ecosystem. With 3CX V20 Update 7, Dynamics 365, and Microsoft Copilot working together, you can connect voice, video, CRM, and AI into a single, intelligent platform.

And as your communications become smarter and more data-rich, CloudOgre ensures your network, SIP trunks, and bandwidth scale to meet the demand.

Ready to Redefine Business Communications?

At CloudOgre, we help enterprises modernize their PBX systems, integrate them with Microsoft Dynamics 365 and Copilot, and transform them into AI-driven communication hubs. If you’re ready to go beyond legacy telephony and unlock the next era of enterprise communications, we’re here to help.

Learn more at cloudogre.com

Big tings a g’wan for the folks at Charter in Stamford, Connecticut. In an industry where many telecom companies merely manage wires, Charter Communications stands out by anticipating and meeting the evolving technical demands of mid-market and enterprise clients.​

1. Expanded Network Enhances Work-from-Home Capabilities in Rural America

After securing $1.2 billion from the FCC’s Rural Digital Opportunity Fund (RDOF), Charter committed an additional $3.8 billion of its own funds to expand broadband access. This $5 billion initiative aims to connect over 1 million previously unserved homes across 24 states, significantly improving connectivity in rural areas. ​Fierce Network

The importance of reliable internet became evident during events like COVID-19 and Hurricane Helene, where connectivity was crucial for safety and maintaining income streams. Charter’s investment not only bridges the digital divide but also empowers rural communities with opportunities for remote work, education, and access to essential services.​

2. Direct Connect to SaaS Services Enhances QoS and Security

In today’s digital landscape, simply increasing bandwidth isn’t sufficient for ensuring Quality of Service (QoS). Charter addresses this by offering direct connections to major SaaS providers like RingCentral, AWS, and Azure. These direct links provide consistent low-latency connections, crucial for real-time applications such as voice and video communications.​

By bypassing the public internet, these direct connections enhance security and reliability, ensuring that voice packets and other sensitive data maintain integrity and performance. This approach is particularly beneficial for businesses relying on Unified Communications as a Service (UCaaS) solutions, where consistent performance is paramount.​

3. Strategic Mergers and Acquisitions Bolster Service Offerings

Charter’s recent announcement to merge with Cox Communications marks a significant move to enhance its commercial fiber and managed IT services. This merger is poised to expand Charter’s footprint and service capabilities, offering more comprehensive solutions to its clients.​channelfutures.com+4Charter Communications+4Wikipedia+4

Over the years, Charter has strategically acquired companies like Bright House Networks and Time Warner Cable, integrating valuable assets such as RapidScale and Telovations. These acquisitions have enriched Charter’s portfolio, enabling the company to offer white-glove managed services that cater to the nuanced needs of system administrators, CISOs, and other stakeholders.​Florida Trend

4. Infrastructure Expansion to Meet Growing Demand

With the increasing number of users and services requiring high-speed connectivity, Charter recognizes the need for expanded peering and long-haul routes. This infrastructure is essential to support the growing appetite for content, whether it’s streaming the latest Netflix series or conducting Teams calls.​

Charter’s investments in infrastructure not only address current demands but also future-proof the network to accommodate emerging technologies and applications. By proactively enhancing its network capabilities, Charter ensures that it can deliver consistent, high-quality service to its expanding customer base.​

In summary, Charter Communications continues to demonstrate foresight and commitment to innovation. Through substantial investments in rural broadband, strategic partnerships, and infrastructure development, Charter is well-positioned to meet the evolving needs of its clients and maintain its status as a leader in the telecommunications industry.​