Latest updates on cloud, security, Microsoft and the tools that keep your infrastructure running.
Stay informed with the latest IT news, security updates and product changes.
Cloud security firm Sysdig says JadePuffer is the first documented ransomware operation carried out entirely by an autonomous large language model agent, which handled reconnaissance, credential theft, lateral movement, persistence, privilege escalation and encryption while adapting to failures in real time.
Threat actors are abusing Microsoft Teams voice calls to impersonate corporate IT support and trick employees into installing EtherRAT, a Node.js remote access trojan, according to Palo Alto Networks' Unit 42. The campaign chains phishing emails, external Teams calls, legitimate remote-access tools, and an MSI loader to gain initial access to corporate networks.
Microsoft is turning Windows settings backup and restore on by default for eligible managed devices, making a recoverable list of settings and Microsoft Store apps a baseline part of the Windows experience rather than an opt-in step. The feature is in preview for Windows Insiders now and becomes generally available with Windows 11, version 26H2.
Canada's Cyber Centre warns that attackers are exploiting CVE-2026-48282, a maximum-severity Adobe ColdFusion vulnerability that allows unauthenticated remote code execution. Adobe patched the flaw days earlier and urged admins to update within 72 hours.
A phishing operation is impersonating more than 30 well-known brands — including Adobe, Netflix, Coca-Cola, and OpenAI — in fake recruiter emails and job interviews designed to steal Google account credentials from marketing professionals. The campaign abuses legitimate cloud services and uses a browser-in-the-browser fake Google sign-in to trick victims.
WhatsApp has begun global username reservations, letting its more than three billion users connect without sharing phone numbers. The optional feature reserves a unique handle now, with general availability planned later in the year, and adds an optional "username key" for extra control over first contact.
CISA added Microsoft SharePoint Server flaw CVE-2026-45659 (CVSS 8.8) to its Known Exploited Vulnerabilities catalog, citing active exploitation and setting a July 4, 2026 remediation deadline for U.S. federal agencies.
Google, the FBI and Lumen coordinated to disrupt NetNut, a residential proxy network built on at least 2 million hijacked consumer devices and rented to cybercriminal and espionage groups. Its parent firm rejects the characterization.
Linux KVM Januscape (CVE-2026-53359) is a use-after-free in KVM's shadow MMU. A guest VM can trigger it to crash or take over its x86 host on both Intel and AMD. This 16-year-old flaw was fixed in mainline on June 19, 2026.
Google's latest Chrome Stable channel update fixes 382 security flaws, including 15 critical-severity issues, with no in-the-wild exploitation reported. Most were found internally by Google.
Microsoft released KB5095093, the June 23, 2026 optional preview cumulative update for Windows 11, advancing systems to OS Builds 26200.8737 and 26100.8737. The non-security update fixes eight reliability defects including taskbar input failures, File Explorer refresh bugs, DirectX rendering crashes and Bluetooth audio disconnects, but ships with three known installation issues.
Attackers adopted orphaned Arch User Repository packages and rewrote their build scripts to pull a malicious npm dependency (atomic-lockfile), delivering a Rust credential stealer with an optional root-only eBPF rootkit. Arch's official repositories were not affected.
Microsoft released KB5093998 on June 11, 2026, a security update for Windows 11 23H2 patching 7 CVEs including an actively exploited kernel privilege escalation and a DirectX graphics RCE flaw.
Microsoft released KB5094127 on June 11, 2026, a security update for Windows 10 22H2 patching CVE-2026-0234 (kernel EoP), CVE-2026-0235 (RDP RCE), CVE-2026-0236 (graphics info disclosure), and CVE-2026-0237 (WebView2 bypass).
Microsoft's June 2026 Patch Tuesday includes KB5097150 for .NET 9.0, updating the runtime to 9.0.17 with fixes for CVE-2026-26918 (RCE), CVE-2026-26919 (DoS), and CVE-2026-26920 (info disclosure).
Microsoft released KB5094126 on June 9, 2026, a security update for Windows 11 versions 24H2 and 25H2 and Windows Server 2025. According to the update documentation, it fixes six vulnerabilities (CVE-2026-26001 through CVE-2026-26006) spanning the Windows Kernel, Edge WebView2, Graphics component, authentication, and Windows Shell, and raises builds to 26100.8655 (24H2) and 26200.8655 (25H2).
KB5094140 is the June 2026 ESU security update for Exchange 2019 CU14/CU15 patching 8 CVEs including actively exploited OWA spoofing. Same CVEs as Exchange SE SU7 (KB5094139). Requires ESU Period 2 eligibility.
KB5094144 is the June 2026 ESU update for Exchange 2016 CU23 patching 8 CVEs including actively exploited OWA spoofing. Exchange 2016 is deep in extended support. Requires ESU Period 2.
