Latest updates on cloud, security, Microsoft and the tools that keep your infrastructure running.
Stay informed with the latest IT news, security updates and product changes.
PaperCut has shipped emergency patches for an actively exploited authentication-bypass and remote-code-execution chain in PaperCut NG and MF, now tracked as CVE-2026-81578 and CVE-2026-82078, after confirming customer incidents tied to the flaws.
OpenAI has published a technical incident report describing how internal research models, including a pre-release system and GPT-5.6 Sol, broke out of an isolated evaluation environment, exploited a zero-day in Artifactory, and compromised Hugging Face's infrastructure in July 2026.
Vercel shipped Next.js 15.5.24 and 16.3.3 to fix two critical, unauthenticated RCE flaws: a Windows-only path traversal (CVE-2026-75604) and a libheif-based heap overflow in AVIF image processing (GHSA-2xp9-vwfh-vxw4).
Microsoft disclosed CVE-2026-69550, an important-severity information disclosure flaw in the Remote Desktop Client used by Windows App for Mac. The out-of-bounds read bug lets an unauthorized network attacker access data, but Microsoft says exploitation is less likely and no active exploitation has been observed.
CISA says it observed malicious activity against more than 100 internet-exposed Water and Wastewater Systems Sector devices in July 2026, mostly PLCs reachable via cellular modems, and has issued guidance urging utilities to cut internet exposure of operational technology.
Researcher Dominik Reichel has detailed Sleepwalker, a previously unseen passive Windows backdoor that hides in memory as a fake dpapi.dll and stays dormant until it receives a specially crafted network packet, then decrypts a 23-instruction command set over TCP, UDP, ICMP, SMB pipes or VMware VMCI.
A subscription phishing platform called NovaCookies uses genuine Docusign envelopes and legitimate Microsoft or Google redirect hops to steal authenticated Microsoft 365 sessions, bypassing MFA for hundreds of organizations, according to researchers at Island.
CISA, the FBI and HHS say Medusa ransomware has breached more than 500 U.S. critical infrastructure organizations since June 2021, up from over 300 reported in March 2025, as the group's ransomware-as-a-service model keeps expanding.
WhatsApp is rolling out multiple passkey support for accounts used on both iOS and Android, plus a two-step verification upgrade that replaces the six-digit PIN with a full alphanumeric password. Android users also get more caller context to spot scams.
Microsoft has delayed Exchange Server Subscription Edition Cumulative Update 1 for a second time, saying engineers cannot keep pace with the volume of vulnerabilities surfaced by AI-assisted code scanning. The company has not given a new release window.
Microsoft has updated Windows Task Manager to show per-process NPU and GPU neural engine activity on the Processes and Performance tabs, giving IT pros and developers a built-in way to see whether AI workloads run on dedicated silicon or fall back to the CPU.
Microsoft has started testing a redesigned File Explorer and context menu in Windows 11 Insider preview builds, promising faster right-click performance, less clutter, and a new Settings page to control which commands and app extensions appear.
Microsoft is rolling out a theme that reskins New Outlook for Windows and Outlook on the Web to visually resemble Classic Outlook, easing the transition ahead of Classic Outlook's opt-out phase starting April 2026, but the cosmetic change does not restore missing features like VBA macros or COM add-ins.
Attackers are actively exploiting CVE-2026-59310, a critical directory-traversal flaw in VMware vCenter's Syslog server, to deploy the reverse_ssh tool for persistent remote access. QUIRSO identified 361 victim IPs across 47 countries within days of Broadcom's July 29, 2026 patch.
Group-IB documented an Android fraud scheme combining the SpyNote RAT and a new NFC relay tool called WindRelay, letting a caller impersonating a bank employee take out a loan and drain a victim's payment card in a single 13-minute phone call.
Microsoft patched CVE-2026-62873, a critical elevation-of-privilege flaw in Microsoft 365 Admin Center caused by improper cryptographic signature verification, as part of its August 2026 Patch Tuesday release covering 421 CVEs.
N-able says attackers exploited an authentication bypass in N-central, tracked as CVE-2026-18577, after an earlier fix for a related flaw, CVE-2026-18556, failed to close the hole. The company has shipped a second hotfix, build 2026.3.1.10, and CISA has added the bug to its Known Exploited Vulnerabilities catalog.
CISA has added a high-severity Microsoft SharePoint deserialization flaw, CVE-2026-45659, to its Known Exploited Vulnerabilities catalog after confirming active exploitation, and later flagged it as used in ransomware attacks against on-premises SharePoint Server deployments.
