Latest updates on cloud, security, Microsoft and the tools that keep your infrastructure running.
Stay informed with the latest IT news, security updates and product changes.
Google shipped Chrome 152.0.7977.82 on 3 September 2026 with 12 security fixes, including CVE-2026-85046, a type confusion bug in the V8 engine that attackers are already using. CISA added it to the KEV catalog the next day.
Navanem has released Leonida Atlas, an AGPL-licensed interactive map of GTA 6's Leonida with 2,204 catalogued places, an optional 3D explorer and no account requirement. It runs live on GTA6State.
Microsoft has acknowledged a known issue where the August 2026 security update makes CompatTelRunner.exe fail repeatedly on Windows Server 2016, filling event logs with Event ID 1000 and exception code 0xc0000409. The company says device functionality is not affected.
Google shipped Chrome 152.0.7977.82/.83 on 3 September 2026 with 12 security fixes, including CVE-2026-85046, a type confusion bug in V8 that attackers are already exploiting. CISA added it to the KEV catalog a day later.
Microsoft has opened a service health advisory, TM1466820, after some Windows users found the Teams desktop client would not open or took up to two minutes to load. The company recommends Teams on the web or mobile while it hunts for a root cause.
Netskope Threat Labs counted more than 5,400 compromised WordPress and PrestaShop sites pulling payloads from a BNB Smart Chain testnet smart contract, serving ClickFix lures and, in a newer variant, a covert WebRTC command channel.
Anthropic has confirmed an ongoing outage affecting multiple Claude models, including Mythos, Fable, and Opus, causing elevated errors and failed requests for users since the morning of September 3, 2026.
Microsoft has confirmed that a mouse personalization reset bug tied to the KB5120998 August 2026 preview update only affects non-English Windows 11 installations, after user reports flagged the issue on version 25H2 and 24H2 devices.
Microsoft has confirmed that the optional KB5120998 preview update stops some Windows 11 desktop settings from loading, leaving a solid black background that users cannot restore manually.
Microsoft has confirmed a known issue in which recent Microsoft Defender Antivirus updates trigger false "Microsoft Defender Antivirus is turned off" alerts in the Windows Security app, even though the antivirus is running normally. The bug affects all supported Windows client and server versions, including Windows 11 26H1 and Windows Server 2025, and a fix is still pending.
Microsoft is investigating a Defender for Office 365 Safe Links misclassification that blocks legitimate Google search URLs, showing "Opening this website might not be safe" warnings across affected tenants.
SonicWall says attackers are chaining CVE-2026-83548 and CVE-2026-83549 to run code on SMA1000 remote access appliances. A hotfix is out, there's no workaround, and no IoCs have been published yet.
Anthropic is warning Claude users that infostealer malware including Vidar, LummaC2, StealC, RedLine, Acreed and Atomic Stealer has stolen active login sessions from infected PCs and Macs, letting attackers hijack accounts and drain usage limits without needing passwords or 2FA.
Microsoft has detailed TerminalFix, a ClickFix variant that lures victims via fake Cloudflare CAPTCHAs into running PowerShell commands in Windows Terminal, ultimately deploying a Python-based reverse-tunnel implant that gives attackers persistent network access.
Microsoft is investigating a widespread Exchange Online outage, tracked as EX1464935, causing email delivery delays, authentication errors, and mailbox access failures for customers worldwide.
The DoJ and FBI announced the disruption of QScan and QTRouter, two hacking platforms run by China-linked group QTFY, which used a botnet of hijacked IoT devices and leased VPSs to hide intrusions into U.S. critical infrastructure, including NASA, the Federal Reserve, and the Senate.
Socket researchers uncovered 19 Chrome and Edge extensions, 14 built by attackers, five acquired from legitimate developers, running a modular framework that drains crypto wallets, harvests exchange sessions, and steals credentials since as early as February 2024.
Researchers at Wordfence and Patchstack disclosed five critical WordPress vulnerabilities in WPMU DEV Dashboard, Avada/Fusion Builder, TranslatePress, Pods, and GiveWP, all scoring 9.8 or 10.0 on CVSS and each capable of full site takeover or remote code execution.
