Author: Gary Behan

Microsoft has confirmed that a Microsoft Entra ID vulnerability tracked as CVE-2026-69836 was actively exploited before the company quietly patched it, with no action required from customers. The flaw carried a maximum severity rating, which, given the platform’s role as the authentication backbone for Microsoft 365, Azure, and Dynamics CRM Online customers worldwide, makes for an uncomfortable disclosure even with the fix already in place.Entra ID, formerly known as Azure Active Directory (Azure AD), is a cloud-based identity and access management (IAM) platform that handles authentication, policy enforcement, and resource protection across apps and services. It sits at the centre…

The arrayref Rust supply chain attack that poisoned three widely used Rust crates on 20 August has been attributed to the North Korean threat actor Sapphire Sleet, according to SecurityWeek. The campaign’s infrastructure overlaps with previous DPRK-linked operations, including ones targeting the Mastra and axios ecosystems, and the reach was considerable, given that arrayref was present in roughly 75% of cloud environments running Rust applications, per Infosecurity Magazine. How the arrayref Rust supply chain attack unfolded The attacker began by creating a GitHub account impersonating prominent Rust developer David Tolnay at 01:17 UTC, followed shortly by a matching account on…

A critical Elementor Pro RCE vulnerability has been patched in version 4.2.2, released on 19 August 2026, closing a flaw that could allow an unauthenticated attacker to upload and execute arbitrary PHP files on a victim’s web server. The vulnerability, tracked as CVE-2026-32475, carries a CVSS score of 9.0, according to Cyber Kendra.What makes the timeline here worth examining: the Elementor team had a working fix prepared on 17 July, just one day after receiving the disclosure. The patch did not reach users until 19 August, a gap of 34 days between fix and release, as Cyber Kendra notes. Administrators…

Citrix is urging administrators to patch a Citrix NetScaler authentication bypass vulnerability rated 9.3 on the CVSS v4.0 scale, alongside a second high-severity flaw that opens the door to denial-of-service attacks. Both affect NetScaler Gateway and NetScaler ADC appliances, and Citrix wants them patched immediately. What the two vulnerabilities actually do The more severe of the pair, CVE-2026-19490, lets remote attackers bypass authentication entirely without needing any privileges. It applies when an appliance is configured as an AAA virtual server or as a Gateway (covering SSL VPN, ICA Proxy, CVPN, and RDP Proxy modes), depending on the firmware version and…

A ChatGPT login outage on 11 December 2024 knocked out sign-ins, new account creation, and the loading of previous conversations for users across the US and Europe, with TechRadar reporting that issues first appeared at 6:17 PM ET. The timing matters, because the original outage notice placed the start closer to 8 PM ET, a 90-minute gap that suggests the problem was spreading quietly before OpenAI’s status page caught up with it.For users trying to access chatgpt.com, the experience was characteristically unhelpful: the sidebar would hang on a loading animation, messages would fail to send, and the service returned errors…

A Dahua IP camera hack labelled CameraSwarm by researchers at Hunt.io compromised more than 14,500 cameras across at least 35 days, running from 17 June to 22 July, targeting devices primarily in Ukraine and Russia through three distinct attack methods operating simultaneously. The scale is uncomfortable: 14,530 cameras in total, and the operator left enough evidence lying around for researchers to reconstruct the entire operation in detail.Hunt.io discovered the campaign after finding a working directory on an HTTP server that the operator had left unprotected. From it, researchers recovered 407 MB of data spanning 2,616 files across 234 directories. The…

The US Justice Department has expanded its case against the Mabna Institute hacking operation, bringing charges against eight additional Iranian nationals and revealing a broader network behind what it describes as a state-sponsored campaign to plunder academic research and intellectual property from institutions across the United States and beyond. The move brings the total number of defendants to 17.Nine of the defendants were originally indicted in March 2018 for hacking into more than 300 universities and private companies. The latest charges flesh out the wider alleged conspiracy, drawing in individuals accused of stealing academic research, intellectual property, emails, and other…

Microsoft has resolved the Windows Defender scan crashes that began hitting Windows 10 and Windows 11 machines after a security update, pushing a fix through signature update version 1.457.236.0. The trouble announced itself bluntly: affected users saw “Threat service has stopped. Restart it now” error messages and 0xc0000005 access violation errors, with quick and full scans failing repeatedly and, in some cases, taking the Defender service down with them.Reports surfaced on social media and Microsoft’s support site from Tuesday afternoon onwards. The scale of disruption was wide enough that some affected customers resorted to reinstalling the operating system entirely, before…

Windows 11 24H2 end of support for Home and Pro editions lands on 13 October 2026, Microsoft has confirmed, giving unmanaged consumer devices roughly two months before monthly security updates stop arriving. The same date also retires Windows 10 Enterprise LTSB 2016, making it a notably busy end-of-support moment for Microsoft’s Windows portfolio. Microsoft issued the reminder via a message centre update, warning that ‘after this date, devices running these editions will no longer receive monthly security and non-security preview updates containing protections from the latest security threats.’ The message is pointed squarely at anyone still on 24H2 Home or…

Comcast’s new Xfinity Shield platform puts Xfinity Shield WiFi motion detection at the centre of a home security bundle that requires no cameras and no hardware beyond the router you already have. The feature works by monitoring how moving bodies disturb the radio signals travelling between an Xfinity gateway and stationary devices on the network, then pushing notifications to the Xfinity app when movement is detected.The launch packages WiFi Motion alongside Xfinity’s CyberSecure network protection and Family Settings into a tier called WiFi Shield, included at no extra charge for Xfinity Internet customers whose gateways are compatible. Comcast is also…