News · via Microsoft Security Response Center
CVE-2026-62698 Microsoft Digest Authentication Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
Microsoft
Coverage tagged "Microsoft".
News · via Microsoft Security Response Center
CVE-2026-50387 Windows GDI Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
News · via Microsoft Security Response Center
CVE-2026-69582 Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
News · via Microsoft Security Response Center
CVE-2026-71343 Windows Remote Access Connection Manager Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
News · via Microsoft Security Response Center
CVE-2026-73009 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
News · via Microsoft Security Response Center
CVE-2026-61936 Windows Defender Firewall Service Security Feature Bypass Vulnerability
Updated an acknowledgement. This is an informational change only.
News · via Microsoft Security Response Center
CVE-2026-54128 Windows DHCP Client Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
News · via ThreatDown
It took one password to compromise two identity platforms
Awareness, Threats It took one password to compromise two identity platforms A stage-by-stage walkthrough of a realistic attack across Microsoft Entra ID and Okta, and exactly where the intrusion…
News · via Hornetsecurity
EvilTokens Device Code Phishing: How It Works and How to Stop It
EvilTokens is a criminal of online service which tricks people into thinking they are logging into a real Microsoft website. In reality, this scam allows attackers to take over victims' Microsoft 365…
News · via Ubuntu Security
USN-8875-1: Linux kernel vulnerabilities
It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local…
News · via Ubuntu Security
USN-8879-1: Linux kernel (Oracle) vulnerabilities
It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local…
News · via Ubuntu Security
USN-8878-1: Linux kernel (GCP) vulnerabilities
It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local…
News · via Ubuntu Security
USN-8877-1: Linux kernel (GCP) vulnerabilities
It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local…
News · via Ubuntu Security
USN-8876-1: Linux kernel (Azure CVM) vulnerabilities
It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local…
News · via BleepingComputer
Nikkei discloses breaches of employees’ Microsoft, Google email accounts
Over the weekend, Japanese publishing giant Nikkei disclosed that unknown attackers recently breached two employee email accounts and used one to send thousands of phishing emails.