CVE-2026-43493 crypto: pcrypt – Fix handling of MAY_BACKLOG requests
Information published. Continue reading CVE-2026-43493 crypto: pcrypt – Fix handling of MAY_BACKLOG requests
CVE-2026-43492 lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl()
Exposing Fox Tempest: A malware-signing service operation
Fox Tempest is a financially motivated threat actor operating a malware‑signing‑as‑a‑service (MSaaS) used by other cybercriminals, including Vanilla Tempest and Storm groups, to more effectively distribute malicious code, including ransomware.
The post Exposing Fox Tempest: A malware-signing service operation appeared first on Microsoft Security Blog.
Continue reading Exposing Fox Tempest: A malware-signing service operation
CVE-2026-45585 Windows BitLocker Security Feature Bypass Vulnerability
Microsoft is aware of a security feature bypass vulnerability in Windows publicly referred to as “YellowKey”. The proof of concept for this vulnerability has been made public violating coordinated vulnerability best practices.
We are issuing this CVE… Continue reading CVE-2026-45585 Windows BitLocker Security Feature Bypass Vulnerability
Introducing new Surface devices built for business and AI acceleration
Every IT leader and partner we work with is navigating the same challenges: AI is changing the demands of how teams work, security threats are growing more sophisticated and agents are changing investment decisions for the future. All under greater s
The post Introducing new Surface devices built for business and AI acceleration appeared first on Windows Blog.
Continue reading Introducing new Surface devices built for business and AI acceleration
Introducing new Surface devices built for business and AI acceleration
Every IT leader and partner we work with is navigating the same challenges: AI is changing the demands of how teams work, security threats are growing more sophisticated and agents are changing investment decisions for the future. All under greater s
The post Introducing new Surface devices built for business and AI acceleration appeared first on Microsoft Devices Blog.
Continue reading Introducing new Surface devices built for business and AI acceleration
CVE-2026-7246 Pallets Click contains a command injection via Unsanitized Filename “click.edit()”
CVE-2026-5773 wrong reuse of SMB connection
Information published. Continue reading CVE-2026-5773 wrong reuse of SMB connection