Do Son Microsoft Q1 FY26 revenue hit $77.7B, driven by 40% Azure growth and Copilot adoption, despite a $3.1B loss related to its $500B-valued OpenAI stake.
Microsoft's Azure cloud suffered an outage caused by a Front Door configuration change, disrupting Microsoft 365, Xbox, and customer services globally.
OpenAI expanded the Sora App to Asia, featuring the popular 'Cameos' tool and strict copyright safeguards after calls from the Japanese government.
OpenAI released the GPT-OSS-SafeGuard models under Apache 2.0, enabling developers to apply custom safety policies at inference time with a transparent reasoning trace.
The Cameo celebrity platform sued OpenAI for trademark infringement over its Sora feature, arguing the name for AI-generated likenesses causes confusion and harms its brand.
Microsoft released a Liquid Glass UI update for its iOS apps, featuring a translucent, floating navigation bar that aligns with Apple's modern design language.
Grammarly has rebranded to Superhuman and launched Superhuman Go, a new AI assistant that unifies Grammarly, Superhuman Mail, and Coda for cross-app automation.
Meta Description: Microsoft released the KB5067036 preview fix for a two-year-old bug where "Update and Shut Down" unexpectedly caused a reboot instead of powering off.
Jenkins warned of a Critical SAML Plugin flaw (CVE-2025-64131) that allows session replay/hijacking due to a missing cache. Multiple plugins also expose API tokens in plaintext.
ISC warned of a High-severity DoS flaw (CVE-2025-11232) in Kea DHCPv4. A crafted DHCP packet can crash the server due to improper hostname validation, disrupting IP assignment. Patch to v3.0.2/3.1.3.
Urgent patch for WP Freeio plugin (v.< 1.2.22). Unauthenticated attackers can gain admin control instantly via a registration flaw. Update immediately to v.1.2.22.
Google Chrome 142 desktop update fixes 20 security flaws, including critical V8 Type Confusion (CVE-2025-12428) and Race conditions. Update your browser now.
Socket exposed an npm typosquat campaign using 10 fake packages (Netherеum.All). The malicious postinstall script deploys a 24MB PyInstaller stealer after prompting a fake CAPTCHA.
WSO2 patched three Critical flaws (CVSS 9.8) in API Manager/Identity Server. Flaws in regex access control and case-sensitive HTTP methods allow unauthenticated administrative takeover.
A critical hardware attack, TEE.fail, uses low-cost DDR5 memory bus interposition to extract root attestation keys from Intel TDX and AMD SEV-SNP. The flaw affects core server-grade TEEs.
ASEC exposed Trigona RaaS attacking exposed MS-SQL servers via brute-force. The group uses CLR Shell, a new Rust-based scanner, and the BCP utility to store and execute malware from database tables.
IIJ exposed a novel loader that simultaneously deploys TorNet (TOR C2) and PureHVNC (RAT) via DLL sideloading. It uses MurmurHash2 for API hashing and injects into jsc.exe for stealth.
A Babuk successor, Midnight ransomware, contains a critical flaw in its RSA key handling. Gen researchers created a free decryptor that bypasses the encryption, allowing victims to recover files.
HelixGuard exposed a VSCode supply chain attack using 12 malicious extensions. They steal source code, capture screenshots, and open reverse shells via Ngrok and AWS EC2 to compromise developers.
Google announced Chrome 154 (Oct 2026) will automatically enable “Always Use Secure Connections,” marking a major security push to combat MitM attacks by warning users before visiting unencrypted HTTP sites.
Researchers from Exodus Intelligence, led by Michele Campa, have disclosed a privilege-escalation vulnerability in Microsoft’s Cloud Files...
BitSight uncovered a Lampion banking Trojan campaign using ClickFix lures and a 700MB bloatware DLL to evade AV. The VBScript loader establishes persistence via the Windows Startup folder.