News · via Microsoft Security Response Center
CVE-2026-69724 Microsoft Office SharePoint Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
Microsoft
Coverage tagged "Microsoft".
News · via Microsoft Security Response Center
CVE-2026-69719 Microsoft Office Word Information Disclosure Vulnerability
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from…
News · via Microsoft Security Response Center
CVE-2026-69739 Microsoft Office Information Disclosure Vulnerability
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from…
News · via Microsoft Security Response Center
CVE-2026-69759 Microsoft Office Word Remote Code Execution Vulnerability
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from…
News · via Microsoft Security Response Center
CVE-2026-69767 Microsoft Office PowerPoint Remote Code Execution Vulnerability
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from…
News · via Microsoft Security Response Center
CVE-2026-78510 Microsoft Outlook and Word Remote Code Execution Vulnerability
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from…
News · via Praetorian
Credentials Are Still the Shortest Path In
How Brutus grew into an engine that finds your identities, tests them everywhere they’re accepted, and remembers what it confirms. An attacker rarely needs a novel exploit when a valid username and…
News · via The Register
Google Pixel phones pwned in zero-click attacks
Both Google and Uncle Sam warned that attackers have exploited a zero-day improper authorization bug in Pixel phones' cellular modems that can bypass permission checks and escalate privileges with no…
News · via Simon Willison
Quoting Mustafa Suleyman
We should not treat models as though they have feelings, preferences, rights, or any entitlement to our welfare. Consciousness is the foundation of our ethical, legal, and political systems. To…
News · via Kaspersky Securelist
NightEagle targets Russian companies
Over the past year, our Global Emergency Response Team (GERT) has investigated several incidents involving the NightEagle group (also tracked as APT-Q-95). This group has been active since at least…
News · via The Register
Mythos has made 2026 patching hell. It might make 2027 a breeze
When Microsoft delivered over 970 patches last week, many saw a nightmare for beleaguered security staff. Gartner research vice president Craig Lawson thinks infosec workers might soon see sunlit…
News · via Zero Day Initiative
ZDI-26-708: (0Day) Microsoft Windows HTTP Proxy Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target…
News · via The Register
The vulnpocalypse rains iBugs down on Apple with record-setting number of patches
Apple has addressed more than 260 CVEs across all of its operating systems, browsers, and other software products, marking the largest single patch cycle in Cupertino's history. While this CVE count…
News · via Dark Reading
Microsoft Issues Emergency Fixes After Massive Patch Tuesday
You can't make an omelet without breaking a few eggs, and you can't patch nearly 1,000 CVEs without a few glitches.
News · via The Register
Iranian spies hit Windows machines with Chosen Brick data-stealing malware
Iranian state cyber actors are targeting individuals using social messaging apps to deploy surveillance and data-stealing malware on their Windows machines, three Western governments warned. In all…
News · via Cloudflare
Have it both ways: stay discoverable in search while disallowing AI training
Without proper controls, website owners have long faced a difficult tradeoff: allow your content to be used for AI training, or risk losing discoverability in search. That tradeoff exists because…
News · via Infosecurity Magazine
Microsoft Releases Emergency Patch to Fix RDS Vulnerability
Microsoft has been forced to issue an out-of-band fix for several issues stemming from this month’s Patch Tuesday
News · via SOCRadar
Simplify Threat Intelligence Procurement with SOCRadar and Microsoft Marketplace
Simplify Threat Intelligence Procurement with SOCRadar and Microsoft Marketplace Your security team has already made the case for external threat intelligence. The budget owner agrees. Then the deal…
News · via Sonar
Your AI agent doesn't know your codebase's context or constraints, and that's costing you
An AI coding agent working in your repository has never seen your architecture. It has not read your intended module boundaries, your team's conventions, the incident that made you ban a certain…
News · via Check Point Research
14th September – Threat Intelligence Report
For the latest discoveries in cyber research for the week of 14th Setpember, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES IDScan.net, a US identity verification…