Latest updates on cloud, security, Microsoft and the tools that keep your infrastructure running.
Stay informed with the latest IT news, security updates and product changes.
Google shipped Chrome 152.0.7977.82 on 3 September 2026 with 12 security fixes, including CVE-2026-85046, a type confusion bug in the V8 engine that attackers are already using. CISA added it to the KEV catalog the next day.
Microsoft has acknowledged a known issue where the August 2026 security update makes CompatTelRunner.exe fail repeatedly on Windows Server 2016, filling event logs with Event ID 1000 and exception code 0xc0000409. The company says device functionality is not affected.
Google shipped Chrome 152.0.7977.82/.83 on 3 September 2026 with 12 security fixes, including CVE-2026-85046, a type confusion bug in V8 that attackers are already exploiting. CISA added it to the KEV catalog a day later.
Microsoft has confirmed that the optional KB5120998 preview update stops some Windows 11 desktop settings from loading, leaving a solid black background that users cannot restore manually.
Microsoft has delayed Exchange Server Subscription Edition Cumulative Update 1 for a second time, saying engineers cannot keep pace with the volume of vulnerabilities surfaced by AI-assisted code scanning. The company has not given a new release window.
Microsoft patched more than a dozen vulnerabilities across Active Directory, Azure, Entra, SharePoint and Teams, including three CVSS 10/10 flaws. Apple fixed a single Screen Sharing authentication bypass (CVE-2026-65400) in macOS.
WordPress shipped forced updates 6.9.5 and 7.0.2 on July 17, 2026, closing a pre-auth remote code execution flaw named wp2shell that an anonymous HTTP request can trigger against a default core install with no plugins. The bug affects 6.9.0-6.9.4 and 7.0.0-7.0.1.
Researchers H0j3n and Aniq Fakhrul have released a working exploit for Certighost, an Active Directory Certificate Services flaw patched in July 2026 that let any low-privileged domain user impersonate a domain controller and reach full domain compromise.
BeyondTrust runs a public security advisory page covering vulnerabilities across its Privileged Remote Access, Remote Support, and Privileged Identity products. If you run these tools as an IT team or MSP, track the advisories and apply fixes fast. BeyondTrust products have a history of actively exploited flaws.
BeyondTrust has patched a critical auth bypass vulnerability set in Remote Support (RS) and Privileged Remote Access (PRA). Two of the four flaws are critical pre-authentication bypasses (CVE-2026-40138 and CVE-2026-40139, CVSS 9.2). Under a specific authentication configuration, they let unauthenticated attackers reach affected appliances.
Canada's Cyber Centre warns that attackers are exploiting CVE-2026-48282, a maximum-severity Adobe ColdFusion vulnerability that allows unauthenticated remote code execution. Adobe patched the flaw days earlier and urged admins to update within 72 hours.
Google's latest Chrome Stable channel update fixes 382 security flaws, including 15 critical-severity issues, with no in-the-wild exploitation reported. Most were found internally by Google.
Microsoft released KB5095093, the June 23, 2026 optional preview cumulative update for Windows 11, advancing systems to OS Builds 26200.8737 and 26100.8737. The non-security update fixes eight reliability defects including taskbar input failures, File Explorer refresh bugs, DirectX rendering crashes and Bluetooth audio disconnects, but ships with three known installation issues.
Microsoft released KB5087054, a cumulative security update for .NET Framework 3.5 and 4.8.1 on Windows 11 Version 24H2 (x64). The update patches an elevation-of-privilege flaw in the CLR (CVE-2026-0234) and an ASP.NET request-validation bypass (CVE-2026-0235), alongside garbage-collector and reliability fixes. It requires a restart and carries several known post-install issues admins should test for.
Microsoft released KB5082142 on April 14, 2026, a critical security update for Windows Server 2022 that patches remote code execution, privilege escalation, information disclosure, and denial-of-service vulnerabilities. The cumulative update raises the OS build to 20348.5020 and requires a restart.
Microsoft released out-of-band cumulative update KB5086672 for Windows 11 versions 25H2 and 24H2 on March 31, 2026, fixing an installation failure (error 0x80073712) that blocked the pulled March 2026 non-security preview update KB5079391. The OOB update raises builds to 26200.8117 and 26100.8117.
