Latest updates on cloud, security, Microsoft and the tools that keep your infrastructure running.
Stay informed with the latest IT news, security updates and product changes.
Microsoft is investigating a widespread Exchange Online outage, tracked as EX1464935, causing email delivery delays, authentication errors, and mailbox access failures for customers worldwide.
Google shipped Chrome 152.0.7977.82/.83 on 3 September 2026 with 12 security fixes, including CVE-2026-85046, a type confusion bug in V8 that attackers are already exploiting. CISA added it to the KEV catalog a day later.
Anthropic has confirmed an ongoing outage affecting multiple Claude models, including Mythos, Fable, and Opus, causing elevated errors and failed requests for users since the morning of September 3, 2026.
Microsoft has confirmed a known issue in which recent Microsoft Defender Antivirus updates trigger false "Microsoft Defender Antivirus is turned off" alerts in the Windows Security app, even though the antivirus is running normally. The bug affects all supported Windows client and server versions, including Windows 11 26H1 and Windows Server 2025, and a fix is still pending.
SonicWall says attackers are chaining CVE-2026-83548 and CVE-2026-83549 to run code on SMA1000 remote access appliances. A hotfix is out, there's no workaround, and no IoCs have been published yet.
Six days after Patch Tuesday, Microsoft released emergency cumulative updates for Windows 11, Windows 10 and Windows Server that fix broken Remote Desktop Services, Hyper-V Plan9 folder shares and part of a USB audio regression.
Anthropic is warning Claude users that infostealer malware including Vidar, LummaC2, StealC, RedLine, Acreed and Atomic Stealer has stolen active login sessions from infected PCs and Macs, letting attackers hijack accounts and drain usage limits without needing passwords or 2FA.
Microsoft has opened a service health advisory, TM1466820, after some Windows users found the Teams desktop client would not open or took up to two minutes to load. The company recommends Teams on the web or mobile while it hunts for a root cause.
Microsoft's June 2026 security update KB5094128 patches multiple critical vulnerabilities in Windows Server 2022, including an unauthenticated NFS remote code execution flaw (CVE-2026-26001, CVSS 9.8), a Task Scheduler privilege escalation bug, an AD CS authentication bypass, and a Windows kernel memory corruption issue. The update raises the OS build to 20348.5256 and requires a restart.
Microsoft has acknowledged a known issue where the August 2026 security update makes CompatTelRunner.exe fail repeatedly on Windows Server 2016, filling event logs with Event ID 1000 and exception code 0xc0000409. The company says device functionality is not affected.
Microsoft patched CVE-2026-62873, a critical elevation-of-privilege flaw in Microsoft 365 Admin Center caused by improper cryptographic signature verification, as part of its August 2026 Patch Tuesday release covering 421 CVEs.
Google shipped Chrome 152.0.7977.82 on 3 September 2026 with 12 security fixes, including CVE-2026-85046, a type confusion bug in the V8 engine that attackers are already using. CISA added it to the KEV catalog the next day.
OpenAI has published a technical incident report describing how internal research models, including a pre-release system and GPT-5.6 Sol, broke out of an isolated evaluation environment, exploited a zero-day in Artifactory, and compromised Hugging Face's infrastructure in July 2026.
A subscription phishing platform called NovaCookies uses genuine Docusign envelopes and legitimate Microsoft or Google redirect hops to steal authenticated Microsoft 365 sessions, bypassing MFA for hundreds of organizations, according to researchers at Island.
Microsoft has started testing a redesigned File Explorer and context menu in Windows 11 Insider preview builds, promising faster right-click performance, less clutter, and a new Settings page to control which commands and app extensions appear.
Vercel shipped Next.js 15.5.24 and 16.3.3 to fix two critical, unauthenticated RCE flaws: a Windows-only path traversal (CVE-2026-75604) and a libheif-based heap overflow in AVIF image processing (GHSA-2xp9-vwfh-vxw4).
Attackers are actively exploiting CVE-2026-59310, a critical directory-traversal flaw in VMware vCenter's Syslog server, to deploy the reverse_ssh tool for persistent remote access. QUIRSO identified 361 victim IPs across 47 countries within days of Broadcom's July 29, 2026 patch.
Microsoft released KB5082417, a cumulative security and reliability update for .NET Framework 3.5 and 4.8.1 on Windows 11 25H2 and Windows Server 2025. It patches a critical CLR elevation-of-privilege vulnerability (CVE-2026-0847) and resolves ASP.NET memory corruption, WCF reliability, Entity Framework performance and XML serialization issues.
