Latest updates on cloud, security, Microsoft and the tools that keep your infrastructure running.
Stay informed with the latest IT news, security updates and product changes.
Microsoft patched CVE-2026-62873, a critical elevation-of-privilege flaw in Microsoft 365 Admin Center caused by improper cryptographic signature verification, as part of its August 2026 Patch Tuesday release covering 421 CVEs.
N-able says attackers exploited an authentication bypass in N-central, tracked as CVE-2026-18577, after an earlier fix for a related flaw, CVE-2026-18556, failed to close the hole. The company has shipped a second hotfix, build 2026.3.1.10, and CISA has added the bug to its Known Exploited Vulnerabilities catalog.
CISA has added a high-severity Microsoft SharePoint deserialization flaw, CVE-2026-45659, to its Known Exploited Vulnerabilities catalog after confirming active exploitation, and later flagged it as used in ransomware attacks against on-premises SharePoint Server deployments.
Microsoft patched more than a dozen vulnerabilities across Active Directory, Azure, Entra, SharePoint and Teams, including three CVSS 10/10 flaws. Apple fixed a single Screen Sharing authentication bypass (CVE-2026-65400) in macOS.
WordPress shipped forced updates 6.9.5 and 7.0.2 on July 17, 2026, closing a pre-auth remote code execution flaw named wp2shell that an anonymous HTTP request can trigger against a default core install with no plugins. The bug affects 6.9.0-6.9.4 and 7.0.0-7.0.1.
Researchers H0j3n and Aniq Fakhrul have released a working exploit for Certighost, an Active Directory Certificate Services flaw patched in July 2026 that let any low-privileged domain user impersonate a domain controller and reach full domain compromise.
Proofpoint has published an analysis of Cruciferra, a crypter service sold since autumn 2025 that combines BYOVD driver abuse, API unhooking and a modified Process Ghosting routine to deliver commodity RATs and infostealers through phishing.
Coca-Cola said on July 27, 2026 that its dairy subsidiary fairlife has resumed the majority of production at its four US plants, and confirmed for the first time that an unauthorised third party took data during the ransomware attack disclosed to the SEC on July 16.
GitHub now makes Dependabot wait three days before opening a version update pull request, and PyPI now rejects new files uploaded to releases older than 14 days. Both changes use time as a supply chain control.
Arctic Wolf Labs traced multiple June 2026 intrusions ending in domain-wide Qilin ransomware encryption to CVE-2026-0257, an authentication bypass in Palo Alto Networks PAN-OS GlobalProtect patched on May 13, 2026.
Anthropic has extended free Claude Fable 5 access for paid subscribers to July 19, 2026, the third deadline shift since the model launched June 9. After that date, Fable 5 moves to usage-credit billing at $10/$50 per million tokens.
Microsoft will remove OWA Light from Exchange Server in an August 2026 update, directing users to modern Outlook on the web.
BeyondTrust runs a public security advisory page covering vulnerabilities across its Privileged Remote Access, Remote Support, and Privileged Identity products. If you run these tools as an IT team or MSP, track the advisories and apply fixes fast. BeyondTrust products have a history of actively exploited flaws.
Researchers at ZeroBEC say a Microsoft 365 device code phishing campaign observed from late June into early July 2026 used collaboration-themed lures and a reusable tooling layer dubbed DEBULL to hijack accounts without stealing passwords or defeating MFA directly. The activity shares strong overlaps with Microsoft's Storm-2372 tradecraft.
BeyondTrust has patched a critical auth bypass vulnerability set in Remote Support (RS) and Privileged Remote Access (PRA). Two of the four flaws are critical pre-authentication bypasses (CVE-2026-40138 and CVE-2026-40139, CVSS 9.2). Under a specific authentication configuration, they let unauthenticated attackers reach affected appliances.
Microsoft has released Malware Protection Engine 1.1.26060.3008 to fix "RoguePlanet" (CVE-2026-50656), a Microsoft Defender race-condition zero-day that a researcher using the "Nightmare Eclipse" handle said could grant SYSTEM privileges on fully patched Windows 10 and 11 devices.
CISA has added an actively exploited Langflow authorization bypass flaw (CVE-2026-55255) to its Known Exploited Vulnerabilities Catalog, ordering U.S. federal civilian agencies to patch it by Friday under BOD 26-04. The IDOR bug lets authenticated attackers access other users' AI flows and the sensitive data they process.
A newly disclosed vulnerability, tracked as CVE-2026-54886, can trigger a denial-of-service condition in an affected SSH/SFTP server implementation through an infinite loop in the handling of extended channel data. Administrators should watch for vendor advisories and patch details as they become available.
