Microsoft has acknowledged CVE-2026-24289, a Windows Kernel privilege escalation vulnerability, but has not released a patch. Review kernel exposure, monitor…
Mo Wasay
Jun 19
‘The Gentlemen’ ransomware group is surging in activity and innovation, rapidly recruiting affiliates and targeting organizations across sectors. This article…
Mo Wasay
Jun 17
A newly clarified elevation-of-privilege (EoP) vulnerability in Microsoft Dynamics 365 (on-premises) is only remediated in v9.1 Update 1.45 and later.…
Mo Wasay
Jun 16
CVE-2026-6429 exposes sensitive netrc credentials in Windows environments when proxy connections are reused, risking lateral movement and credential compromise. Audit…
Mo Wasay
Jun 14
Microsoft has disclosed CVE-2026-4873, a vulnerability where connection reuse fails to enforce TLS, potentially transmitting sensitive data over plaintext. Immediate…
Mo Wasay
Jun 13
A newly disclosed vulnerability (CVE-2026-49975) in Apache HTTP Server's mod_http2 enables unauthenticated attackers to cause denial-of-service. Security teams running affected…
Mo Wasay
Jun 12
A flaw in GnuTLS certificate validation allows attackers to bypass trust checks by abusing URI and SRV Subject Alternative Names…
Mo Wasay
Jun 11
CVE-2026-47294 highlights a remote code execution vulnerability in Microsoft SharePoint Server. While the latest disclosure is informational, practitioners should review…
Mo Wasay
Jun 10
CVE-2026-33118 is a spoofing vulnerability in Microsoft Edge (Chromium-based) that could enable deceptive UI or phishing attacks. While the latest…
Mo Wasay
Jun 8
A flaw in libexpat before 2.8.2 exposes systems to use-after-free attacks via unchecked handler call depth. Audit your deployments immediately…
Mo Wasay
Jun 7