For providers

Ahead of Black Hat USA, researchers find exploitable flaws in how Microsoft handles passkeys that could allow attackers to impersonate privileged users.

The sheer number of Linux kernel CVEs, published recently, has raised questions about effective vulnerability management.

This new tool inspects Android and iOS apps at the binary level, creating a software bill of materials for each application and checking components against vulnerability databases and threat intelligence feeds.

The Exchange Server team confirmed that there will be no further extensions beyond the current Period 2 ESU program, which concludes in October 2026.

The HermeticReader vulnerability (CVE-2026-48294) exploited a flaw in the Adobe Acrobat extension, allowing any malicious website to inject commands into the extension.

This TrickBot variant, detailed in research by Fortinet's FortiGuard Labs, utilizes a modular architecture but features a redesigned transport layer.

A report by the GSMA, a global trade body representing the telecom industry, suggests the direct cost of replacing equipment from designated high-risk vendors could range from €30 billion to €40 billion.

The vulnerability stems from a security hardening change made in July 2025, where snap-confine shifted to a set-capabilities model.

The exposed files, identified as belonging to Carla, contained personal information of drivers including names, email addresses, phone numbers, rental details, confirmation numbers, and travel patterns.

The new platform integrates OneSpan's existing authentication tools, including one-time passcodes, FIDO2, the Digipass line, and Cronto transaction signing, which were previously offered as separate products.