Microsoft Fixes CVSS 10 Azure AI Foundry Privilege-Escalation Flaw
Microsoft has remediated a maximum-severity authentication flaw in Azure AI Foundry that could allow an unauthenticated network attacker to gain elevated privileges. The cloud-side fix is complete, but...
CVSS 10 WSO2 Authentication Bypass Threatens API Control Planes
WSO2 has disclosed CVE-2026-5430, a maximum-severity JWT authentication bypass affecting several API management products. Remote attackers could obtain privileged access without credentials, making rapid updates and a review...
CISA Orders Urgent ScreenConnect Response as Attackers Exploit Critical Flaw
CISA has confirmed active exploitation of a critical ConnectWise ScreenConnect authorization flaw and ordered rapid remediation for covered agencies. Organizations should patch immediately and investigate prior remote sessions,...
Critical Check Point Login Flaw Exposes Management Servers to Root Takeover
Check Point has issued an urgent fix for CVE-2026-91843, a remotely exploitable buffer overflow that can grant root privileges before authentication. Administrators should deploy and verify the LivePatch...
Security Update Backfires: Windows 11 Patch Breaks Domain Trust, Locks Out Enterprise Users
Microsoft is investigating reports that the September Windows 11 cumulative update, KB5124008, is breaking Active Directory domain trust on some enterprise machines, blocking valid logins. The likely cause...
Chrome 153 Patches 42 Security Flaws, Including Three Critical Memory Bugs
Google’s Chrome 153 stable update closes 42 vulnerabilities, including three critical memory-safety issues in Internals, Workers and WebGL. Users and administrators should ensure the browser has restarted on...
Apple’s Largest Coordinated Update Closes 273 Unique Vulnerabilities
Apple has issued coordinated updates across its device ecosystem addressing 273 unique CVEs. The fixes cover remote code execution, kernel privilege escalation, authentication bypass, privacy failures and web-content...
Chinese Hacking Crew Weaponizes Critical Gitea Flaw to Hijack Self-Hosted Git Servers Worldwide
A Chinese-speaking intrusion set tracked as Red Heron is exploiting a critical remote-code-execution bug in self-hosted Gitea instances, deploying a custom Linux implant and rootkit against victims in...