News · via Microsoft Security Response Center
CVE-2026-69693 Windows Device Association Broker Service Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
Microsoft
Coverage tagged "Microsoft".
News · via Microsoft Security Response Center
CVE-2026-69277 Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
News · via Microsoft Security Response Center
CVE-2026-69322 Microsoft Windows Search Component Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
News · via Microsoft Security Response Center
CVE-2026-69571 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
News · via Microsoft Security Response Center
CVE-2026-69688 Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
News · via The Hacker News
Attackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edge
Threat actors have been observed exploiting two recently disclosed flaws in the AhsayCBS backup utility to seize control of affected devices and deploy web shells and XMRig cryptocurrency miners…
News · via BleepingComputer
Microsoft: Outdated Windows devices will stop receiving security updates
Microsoft says devices running unsupported versions of Windows will stop receiving security updates after next year's Windows Update certificate rotation.
News · via Ubuntu Security
USN-8887-3: Linux kernel vulnerabilities
It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly…
News · via Ubuntu Security
USN-8875-2: Linux kernel (NVIDIA) vulnerabilities
It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local…
News · via Ubuntu Security
USN-8903-2: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system.
News · via Ubuntu Security
USN-8905-2: Linux kernel (GCP) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system.
News · via Help Net Security
October 2026 Patch Tuesday forecast: Time for an Office cleanup
September 2026 Patch Tuesday set an all-time record with 973 CVEs addressed across the Microsoft portfolio. We’re only four months into the Patch Apocalypse and everyone seems to be numb with respect…
News · via SpecterOps
What the 2026 Microsoft Digital Defense Report reveals about AI, identity, and the future of cybersecurity
Key Takeaways Identity is the common thread. The Microsoft Digital Defense Report 2026 shows identity sprawl, non-human identities, and AI agents driving interconnected risk. Cloud identity abuse was…
News · via Microsoft Security
Post-quantum authentication: Why organizations should start testing certificate ecosystems now
Why post-quantum authentication presents a different challenge Why organizations should begin preparing now Microsoft's perspective on readiness Testing the future certificate ecosystem Expanding…
News · via CyberScoop
DOJ, FBI seize Flax Typhoon-linked hacking tools Microscan, FishHub
The Justice Department and FBI announced that they had seized two hacking tools connected to the Chinese government-linked group Flax Typhoon and a China-based company that the U.S. government has…
News · via BleepingComputer
Microsoft Teams to get support for third-party deepfake detection tools
Microsoft will soon introduce support for third-party deepfake detection solutions and impersonation protection in Teams meetings.
News · via OWASP GenAI Security Project
GenAI and Agentic AI Exploit Roundup Q3 2026
Coverage period: July 1, 2026 through September 30, 2026 Overview This roundup consolidates selected major AI-related security incidents and exploit disclosures reported during the coverage period…
News · via CISA
Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data
Advisory at a Glance Title Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data Original Publication October 8, 2026 Executive Summary…
News · via Security Affairs
U.S. Offers $10 Million Reward for Alleged HAFNIUM Hacker Zhang Yu
The U.S. offers $10M for Zhang Yu, accused of helping run HAFNIUM attacks that compromised thousands of organizations worldwide. The U.S. State Department is offering a $10 million reward for…
News · via Help Net Security
GitHub adds AI to catch passwords before a code push
GitHub has announced an AI detector, developed with Microsoft Applied Sciences, to help prevent developers from uploading passwords and other credentials to code repositories. The ModernBERT-based…