Azure CLI Password Spray Hits Microsoft 365 Accounts in 81M Attempts
A large Azure CLI password spray campaign used old passwords and ROPC flows to compromise Microsoft 365 accounts despite weak Conditional Access coverage.
Scam library
Phishing Scams: Tips to Spot and Prevent
Recent phishing, fake store, and scam website reports, arranged for quick checking without oversized preview images.
Oracle E-Business Suite CVE-2026-46817 Exploited in Payments Attacks
Oracle E-Business Suite CVE-2026-46817 exploitation has begun against Oracle Payments. Admins should patch May 2026 CSPU and review exposed EBS web interfaces.
Kemp LoadMaster CVE-2026-8037: Patch Pre-Auth Root RCE
Progress Kemp LoadMaster CVE-2026-8037 can let an unauthenticated attacker run root commands through API command endpoints. Patch to GA 7.2.63.2 or LTSF 7.2.54.18 and...
SimpleHelp CVE-2026-48558: Patch Exploited OIDC Bypass
CISA added SimpleHelp CVE-2026-48558 to KEV after active exploitation. Admins should patch 5.5.15 and older or 6.0 prerelease builds and review RMM access.
StegoAd Edge Extensions: Microsoft Removed 119 Malicious Add-ons
Microsoft removed 119 StegoAd Edge extensions that hid payloads in images and fonts. Users should audit extension IDs, remove matches, and rotate exposed credentials.
pedit COW CVE-2026-46331: Patch Linux Kernel Root Flaw
CVE-2026-46331, nicknamed pedit COW, is a Linux kernel local-root flaw in traffic control. Patch and reboot shared Linux systems first.
KDDI Email Breach May Expose 14.2M ISP Passwords
KDDI says a third-party software flaw exposed email addresses and passwords for up to 14.22 million accounts across six Japanese ISP services.
Amazon Q Developer CVE-2026-12957: Patch MCP RCE Flaw
Amazon Q Developer users should update Language Servers for AWS after high-severity CVEs exposed malicious-workspace code execution and file-write risks.
Signal Recovery Key Phishing: FBI Warns Russian Hackers
FBI and CISA warn Russian intelligence-linked hackers now phish Signal Backup Recovery Keys. Check linked devices, rotate exposed keys, and never share recovery codes.
DirtyClone CVE-2026-43503: Patch Linux Kernel Root Flaw
DirtyClone, tracked as CVE-2026-43503, is a Linux kernel local privilege escalation flaw tied to the DirtyFrag family. Administrators should verify whether their distribution kernel...
PTC Windchill CVE-2026-12569: Patch Exploited RCE Now
CISA added PTC Windchill and FlexPLM CVE-2026-12569 to KEV after active exploitation evidence. Check exposure, patch by June 28, and review PLM integrations.
curl 8.21.0 Fixes 18 CVEs, Including 25-Year libcurl mTLS Bug
curl 8.21.0 patches 18 security flaws, including CVE-2026-8932 in libcurl mTLS connection reuse. Developers should inventory embedded libcurl copies and rebuild affected apps.
