TITAN LAYERCybercriminals are posing as IT support on Microsoft Teams, tricking employees into granting remote access to their PCs. They exploit insecure Active Directory Certificate Services settings to obtain login certificates for privileged accounts, including a domain controller.
A critical flaw in Canonical's LXD and MicroCloud allows attackers to impersonate trusted clients without holding their private keys. This could lead to unauthorized access to clusters and virtual machines.
A security researcher has released a proof-of-concept exploit for a recently patched Android vulnerability, dubbed 'SMS of Death', allowing attackers to disrupt cellular service or crash phones by sending a specially crafted text message.
CVE-2026-118354 has been identified in Skia, a graphics library used by Chromium. This vulnerability poses a security risk to Chromium-based browsers such as Microsoft Edge.
The CVE-2026-118355 vulnerability has been identified in Chromium, impacting Microsoft Edge. This security flaw could allow attackers to exploit the browser. Immediate updates are recommended.
CVE-2026-118356 has been identified in Chromium, affecting Microsoft Edge. This 'use after free' issue could allow attackers to exploit the browser. Timely updates are essential.
A new vulnerability has been identified in the V8 engine of Chromium, affecting Chromium-based browsers including Microsoft Edge. Updates are recommended to mitigate risks.
The CVE-2026-118357 vulnerability, identified in Chromium, can lead to a use after free condition in the FileSystem, affecting Chromium-based browsers like Microsoft Edge.
CVE-2026-91732 has been identified in Chromium, affecting users of Microsoft Edge. The missing authorization flaw raises concerns about potential exploitation.
The CVE-2026-118358 vulnerability has been identified in Chromium, affecting Microsoft Edge. This security flaw can lead to memory corruption, exposing users to risks.
Blockchain analysts link the record crypto theft to North Korean hackers, as Binance probes a possibly compromised engineer laptop.
CVE-2026-69446 has been corrected by adding the assigning CNA. This change is informational, highlighting the importance of security updates.
A critical vulnerability in Visual Studio allows unauthorized attackers to perform spoofing on network communications due to improper certificate validation.