Security Bulletin

The Exchange Server team confirmed that there will be no further extensions beyond the current Period 2 ESU program, which concludes in October 2026.

The HermeticReader vulnerability (CVE-2026-48294) exploited a flaw in the Adobe Acrobat extension, allowing any malicious website to inject commands into the extension.

This TrickBot variant, detailed in research by Fortinet's FortiGuard Labs, utilizes a modular architecture but features a redesigned transport layer.

A report by the GSMA, a global trade body representing the telecom industry, suggests the direct cost of replacing equipment from designated high-risk vendors could range from €30 billion to €40 billion.

The vulnerability stems from a security hardening change made in July 2025, where snap-confine shifted to a set-capabilities model.

The exposed files, identified as belonging to Carla, contained personal information of drivers including names, email addresses, phone numbers, rental details, confirmation numbers, and travel patterns.

The new platform integrates OneSpan's existing authentication tools, including one-time passcodes, FIDO2, the Digipass line, and Cronto transaction signing, which were previously offered as separate products.

The exercise, hosted by the Center for Strategic and International Studies, simulated a Chinese military exercise around Taiwan in 2027, followed by suspected Chinese cyberattacks on U.S. ports, freight rail, and airports.

Sandworm_Mode is an early example of malware that exploits trusted AI tools and workflows to make malicious activity virtually indistinguishable from normal activity.

A malicious application delivers four-stage Android spyware via phony Google Play sites, exploiting civilian fear during Iranian missile strikes.

This isn't a new attack, but something I saw "pop-up" in our logs this week:

New SharePoint flaw exploited as attackers steal machine keys for lasting access.