Latest updates on cloud, security, Microsoft and the tools that keep your infrastructure running.
Stay informed with the latest IT news, security updates and product changes.
Microsoft is previewing Cloud Rebuild, a new Windows 11 recovery option that reinstalls the OS by downloading the image and drivers from Windows Update — even when Windows won't boot. It arrived in Insider Experimental Preview Build 26300.8772 and is currently for non-production evaluation only.
CISA has added four vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog based on evidence of active exploitation: one affecting Lantronix EDS5000 device servers and three in Ubiquiti UniFi OS. Federal civilian agencies must remediate under BOD 26-04, and CISA urges all organizations to prioritize these fixes.
Broadcom's VMware Cloud Foundation (VCF) has again been named a G2 Leader in the Infrastructure as a Service category for Summer 2026, earning regional, segment, and momentum badges based on verified customer reviews. The recognition lands alongside the VCF 9.1 release.
Cloud security firm Sysdig says JadePuffer is the first documented ransomware operation carried out entirely by an autonomous large language model agent, which handled reconnaissance, credential theft, lateral movement, persistence, privilege escalation and encryption while adapting to failures in real time.
Threat actors are abusing Microsoft Teams voice calls to impersonate corporate IT support and trick employees into installing EtherRAT, a Node.js remote access trojan, according to Palo Alto Networks' Unit 42. The campaign chains phishing emails, external Teams calls, legitimate remote-access tools, and an MSI loader to gain initial access to corporate networks.
Microsoft is turning Windows settings backup and restore on by default for eligible managed devices, making a recoverable list of settings and Microsoft Store apps a baseline part of the Windows experience rather than an opt-in step. The feature is in preview for Windows Insiders now and becomes generally available with Windows 11, version 26H2.
Canada's Cyber Centre warns that attackers are exploiting CVE-2026-48282, a maximum-severity Adobe ColdFusion vulnerability that allows unauthenticated remote code execution. Adobe patched the flaw days earlier and urged admins to update within 72 hours.
A phishing operation is impersonating more than 30 well-known brands — including Adobe, Netflix, Coca-Cola, and OpenAI — in fake recruiter emails and job interviews designed to steal Google account credentials from marketing professionals. The campaign abuses legitimate cloud services and uses a browser-in-the-browser fake Google sign-in to trick victims.
WhatsApp has begun global username reservations, letting its more than three billion users connect without sharing phone numbers. The optional feature reserves a unique handle now, with general availability planned later in the year, and adds an optional "username key" for extra control over first contact.
CISA added Microsoft SharePoint Server flaw CVE-2026-45659 (CVSS 8.8) to its Known Exploited Vulnerabilities catalog, citing active exploitation and setting a July 4, 2026 remediation deadline for U.S. federal agencies.
Google, the FBI and Lumen coordinated to disrupt NetNut, a residential proxy network built on at least 2 million hijacked consumer devices and rented to cybercriminal and espionage groups. Its parent firm rejects the characterization.
Linux KVM Januscape (CVE-2026-53359) is a use-after-free in KVM's shadow MMU. A guest VM can trigger it to crash or take over its x86 host on both Intel and AMD. This 16-year-old flaw was fixed in mainline on June 19, 2026.
Google's latest Chrome Stable channel update fixes 382 security flaws, including 15 critical-severity issues, with no in-the-wild exploitation reported. Most were found internally by Google.
Microsoft released KB5095093, the June 23, 2026 optional preview cumulative update for Windows 11, advancing systems to OS Builds 26200.8737 and 26100.8737. The non-security update fixes eight reliability defects including taskbar input failures, File Explorer refresh bugs, DirectX rendering crashes and Bluetooth audio disconnects, but ships with three known installation issues.
Attackers adopted orphaned Arch User Repository packages and rewrote their build scripts to pull a malicious npm dependency (atomic-lockfile), delivering a Rust credential stealer with an optional root-only eBPF rootkit. Arch's official repositories were not affected.
Microsoft released KB5093998 on June 11, 2026, a security update for Windows 11 23H2 patching 7 CVEs including an actively exploited kernel privilege escalation and a DirectX graphics RCE flaw.
Microsoft released KB5094127 on June 11, 2026, a security update for Windows 10 22H2 patching CVE-2026-0234 (kernel EoP), CVE-2026-0235 (RDP RCE), CVE-2026-0236 (graphics info disclosure), and CVE-2026-0237 (WebView2 bypass).
Microsoft's June 2026 Patch Tuesday includes KB5097150 for .NET 9.0, updating the runtime to 9.0.17 with fixes for CVE-2026-26918 (RCE), CVE-2026-26919 (DoS), and CVE-2026-26920 (info disclosure).
