Skip to content
October 6, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
  • Home
  • News
  • Technology
  • Microsoft releases its own custom Linux kernel and distribution for the Internet of Things
  • Technology

Microsoft releases its own custom Linux kernel and distribution for the Internet of Things

Do Son April 18, 2018 2 minutes read
Add Daily CyberSecurity as a preferred source on Google

Microsoft first released its own custom Linux kernel and distribution. At a press conference in San Francisco, Microsoft announced Azure Sphere, a solution for IoT devices.

Azure Sphere contains three components. One of them is a Sphere MCU designed by Microsoft, which will be provided to manufacturers for free. MediaTek will launch the first product, the MT3620, later this year. Microsoft claims that its chips have the versatility and processing capabilities of the ARM Cortex-A series of chip designs and more. Smaller overhead. Sphere MCUs integrate application processors, real-time processors, Flash memory, memory, and Microsoft’s security module Pluton.

Another component is Azure Sphere. The IoT OS is based on the Linux kernel. Microsoft claims it uses a custom kernel and Windows-inspired security features. Application code can run in isolated containers.

The third component is the Azure Sphere Security Service, a secure cloud service.

The announced Azure Sphere covers both software and hardware. Microsoft has also developed “new levels” of Microcontrollers Units (MCUs) for this purpose, which is five times the performance of older MCUs. Moreover, these designs can be licensed to partner companies without license fees. The first motherboard comes from MediaTek.

Azure Sphere OS is run through an Azure Sphere-authorized MCU, which is a Linux-based, custom release that includes “multiple security layers.” The system is optimized for the IoT system and incorporates the many security features of the Windows system to create a highly secure software environment.

Related coverage

  • Elegant Reimagining of Apple Pay in iOS 27
  • The Day the Internet Broke: Unpacking the June 12th Global Cloud Meltdown
  • Death of the XSS Bug? Firefox 148 Debuts the Sanitizer API to Neutralize Malicious Scripts
  • GitHub Hit by Widespread Outage: Core Services Disrupted Globally
  • APT Detection Evolves: LogShield Leverages Machine Learning for Defense
  • CapCut’s New Terms: ByteDance Gains Perpetual Rights to User Content, Likeness, & Voice Globally
Track all actively exploited CVEs →

Support Our Threat Intelligence

Find our tech and OS security coverage helpful? Support our work today and unlock a 100% ad-free reading experience!

Buy Me a Coffee Logo Buy Me a Coffee
Select your plan
Free Pro Team

Hover over a plan to see its benefits.

Get Zero-Hour Vulnerability Alerts

Critical CVEs, CVSS scores, and PoC updates — straight to your inbox every week.

We respect your inbox. Unsubscribe anytime.

SHARE
Share on FacebookShare on XShare on LinkedInShare on TelegramShare on BlueskyShare on Mastodon
Written by
@DdoS · Security Researcher

Do Son

Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.

Tags: Internet of Things

Search

Translation

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-88779CVSS 8.7
    Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS,...
    Admin intelCISA KEV📅 Added to KEV: Oct 4, 2026📅 Updated: Oct 4, 2026
  • CVE-2026-102490CVSS 8.5
    All versions of Zammad including the latest alpha enable the local zammad user to escalate privileges to root.
    Admin intelCISA KEV📅 Added to KEV: Oct 2, 2026📅 Updated: Oct 2, 2026
  • CVE-2026-102489CVSS 8.7
    Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as...
    Admin intelCISA KEV📅 Added to KEV: Oct 2, 2026📅 Updated: Oct 2, 2026
  • CVE-2026-100382CVSS 10.0
    Improper Neutralization of Special Elements used in an OS Command (\'OS Command Injection\') vulnerability in Wikimedia Foundation Mediawiki...
    Admin intel📅 Updated: Oct 1, 2026
  • CVE-2026-104286CVSS 9.8
    An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through...
    CISA KEV📅 Added to KEV: Oct 1, 2026
  • CVE-2026-76504CVSS 9.8
    A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote...
    Admin intelCISA KEV📅 Added to KEV: Sep 30, 2026📅 Updated: Sep 30, 2026
  • CVE-2026-86950CVSS 8.8
    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and...
    Admin intelCISA KEV📅 Added to KEV: Sep 29, 2026📅 Updated: Sep 29, 2026
  • CVE-2026-88772
    Memory overflow vulnerability leading to remote code execution or denial of service.
    Admin intelCISA KEV📅 Added to KEV: Sep 27, 2026📅 Updated: Sep 27, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-82531CVSS 9.2
    Smarty before 4.5.8 and 5.x before 5.8.5 contains a code injection vulnerability where the top-level nocache_hash is never...
    📅 Updated: Oct 6, 2026
  • CVE-2025-12543CVSS 9.6
    A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and...
    📅 Updated: Oct 6, 2026
  • CVE-2026-85153CVSS 9.3
    This vulnerability exists in the Schmooze app due to the use of hardcoded credentials and cryptographic keys in...
    📅 Updated: Oct 6, 2026
  • CVE-2026-42415CVSS 9.3
    Unauthenticated SQL Injection in Porto Theme - Functionality
    📅 Updated: Oct 6, 2026
  • CVE-2026-42417CVSS 9.3
    Unauthenticated SQL Injection in ARMember Premium
    📅 Updated: Oct 6, 2026
  • CVE-2026-41555CVSS 9.3
    Unauthenticated SQL Injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email
    📅 Updated: Oct 6, 2026
  • CVE-2026-39795CVSS 9.3
    Unauthenticated SQL Injection in SendPress Newsletters
    📅 Updated: Oct 6, 2026
  • CVE-2026-39797CVSS 9.8
    Unauthenticated PHP Object Injection in GDPR Framework By Data443
    📅 Updated: Oct 6, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q2 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.