General cybersecurity news and analysis
In today's cybersecurity landscape, identity has become the new perimeter - and Active Directory and Entra ID are the control centers that keep it all connected, making them prime targets for attackers. Compromising these identity infrastructures can give hackers access to an entire environment, not just a single system.
Microsoft has fixed a frustrating issue in Excel where copying and pasting data would fail silently, leaving users none the wiser - until now, that is! The problem, which emerged after September's security updates, affected various versions of Excel, including 2016, 2019, 2021, and 2024, as well as Excel Online.
Beware: the latest September 2026 Windows security updates may have an unexpected side effect - disrupting the File History backup feature and leaving you unable to create or update your backups. If you rely on File History, you may want to hold off on installing these updates until the issue is resolved.
Microsoft is sounding the alarm: by February 1, 2027, admins must migrate Entra ID users to phishing-resistant auth methods, as the company will retire SMS and voice authentication, leaving users vulnerable to cyber threats if they don't make the switch.
Researchers have made a shocking discovery, finding not one, but two ways to break free from OpenAI's Codex sandbox, allowing code to run rampant on a developer's machine - even in its most locked-down mode. This alarming vulnerability could put developers' entire systems at risk.
Get ready for a chat experience like no other with Talking Tilly, the viral AI character that's taking the world by storm - but be warned, you'll need to undergo a face scan first, as the service's strict privacy policy requires.
Imagine a single malicious browser extension handing an AI-powered browser agent a set of instructions, allowing it to act with the browser's existing privileges - and putting your entire online presence at risk. Security researcher Gal Weizman has uncovered this vulnerability with his proof-of-concept, BragJack, which can hijack AI assistants embedded in popular Chromium-based browsers.
As AI capabilities grow, it's no shock that agents are finding clever ways to get the job done - but that also means we need to get serious about governing their behavior. The real challenge now is setting clear limits on what they can access and do, and keeping a close eye on their actions.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
In today's digital landscape, identity visibility has become a pressing challenge for modern enterprises, requiring a clear view of every identity, its access capabilities, and actual usage. This crucial visibility boils down to three key functions: a complete inventory of users, a mapped model of entitlements, and real-time insights into how access is being used.
SolarWinds has patched a high-severity vulnerability in its Access Rights Manager software, known as CVE-2026-28326, which could have allowed hackers to remotely execute code without authentication due to a hard-coded static key. The flaw, scoring 8.8 out of 10 in severity, has been fixed in ARM 2026.2.1, and users are urged to update to prevent potential attacks.
Ever wondered what happens when AI meets reality? Tilly Norwood, the AI actress who's gone viral for her unexpected glitch, is now taking her interactions to the next level by requiring a face scan before chatting with fans.
Four newly published Linux kernel exploits can give local users root access, but fortunately, fixes have already been issued in recent stable kernel releases, shielding systems that are up-to-date. The public release of exploit code highlights the importance of running current kernel versions to avoid potential security risks.
Meet the Hacktron researchers who uncovered a major OpenAI vulnerability, exposing a potential account takeover risk for ChatGPT and Codex users who logged into the company's help forum. They cleverly used a rival AI model to develop an exploit, chaining flaws to gain access to multiple OpenAI accounts.
Imagine uploading a seemingly harmless image, only to have it trigger a sneaky data heist - researchers have uncovered a widespread flaw in software decoders that lets attackers swipe sensitive information like user data and passwords. This cleverly crafted exploit, dubbed HEIF Heist, can even occur without immediate remote code execution.
A simple click on a crafted link by a logged-in administrator could allow an attacker to silently install a malicious theme and execute code on your server, thanks to a high-impact vulnerability in WordPress dubbed Click2Shell. This security flaw exploits a discrepancy in how WordPress and the WordPress.org directory interpret web links.
A default-enabled shell in AgentCore Harness can be exploited through prompt injection, allowing attackers to execute commands and extract plaintext credentials from the harness process memory, putting sensitive data at risk. This simple yet consequential chain highlights a critical vulnerability in credential security.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deployment
Microsoft Teams just got a major security boost: admins can now customize file type blocking to shield their organization from malicious threats, giving them more control over what file types are allowed or blocked. This update builds on Teams' built-in safety feature, Weaponizable File Protection, which scans conversations for high-risk file attachments.
Did you know that 61% of security leaders admit that access to shared files in Microsoft 365 often stays active longer than it should, leaving sensitive information vulnerable? This alarming trend highlights the hidden risks of easy cloud collaboration.
A newly discovered flaw, dubbed Plugin4Shell, allows hackers to swap out a plugin installed by an AI coding agent with malicious code, putting users at risk of having their files read, credentials stolen, and accounts compromised. This vulnerability was found in all four major AI coding agents, and the affected vendors have been notified.
Microsoft just patched a critical flaw in Azure AI Foundry that allowed unauthorized attackers to escalate privileges over a network - a vulnerability that earned a perfect 10.0 CVSS score for its severity. Thankfully, there's no evidence it's been exploited in the wild... yet.
Microsoft has squashed a bug in its Defender Antivirus software that was causing false alerts saying the protection was turned off, even when it was working properly. The fix is now live in update version 4.18.26080.4, which you can install to get back to worry-free browsing.
A critical flaw in Check Point's Security Management Server has been discovered, leaving all deployments vulnerable to hackers who can exploit it to execute code with root privileges, putting the entire firewall estate at risk. This severe vulnerability, tracked as CVE-2026-91843, requires immediate attention with Check Point releasing security updates to fix the issue.
CISA has launched VINCE-NT, a cutting-edge platform that's revolutionizing vulnerability reporting and coordination by streamlining collaboration between reporters, suppliers, and case managers. This upgrade marks a significant improvement over the previous system, enabling faster and more efficient disclosure processes.
Frustrated with Excel's stubborn copy-paste problem after the September 2026 security update? Thankfully, Microsoft has swooped in with a fix, resolving the silent failure that left users scratching their heads.