VulnerabilityDark Reading·1 day ago
How an Emerging Industrial Protocol Family Could Put OT at Risk
New research shows how attacks against some unprotected TSN protocols could allow attackers to disrupt or manipulate physical processes
← Back
VulnerabilityThe Register·2 days ago
Homeland security cybercops say patch TrueConf (Russia's Zoom) if you're using it
Ukrainian hacktivists exploiting the bugs, but TrueConf's reach stretches well beyond home turf
Read full article at The Register ↗Related Articles
VulnerabilityCybersecurity Dive·2 days ago
Microsoft confirms maximum severity flaw in Entra ID targeted for exploitation
Microsoft has confirmed a maximum severity remote-code execution vulnerability in Entra ID that is being actively exploited in the wild. The company states the flaw has been fully mitigated and requires no further action from customers.
VulnerabilitySecurityWeek·2 days ago
Encrypted Prompts Bypass AI Safety Guardrails in Grok and Gemini
Researchers have identified a new attack technique called Cryptographic Context Injection that encrypts malicious instructions to evade safety guardrails in AI models including Grok and Gemini. The method works by concealing harmful prompts until they are decrypted within a trusted execution environment, effectively bypassing existing content filtering mechanisms. This vulnerability highlights a novel attack vector against popular large language models that defenders should monitor.
VulnerabilityThe Cyber Express·2 days ago
Microsoft Says CVSS 10.0 Entra ID Code Execution Flaw Was Exploited Before Server-Side Fix
Microsoft disclosed a maximum-severity unauthenticated remote code execution vulnerability in Entra ID (CVE-2026-69836, CVSS 10.0) that was exploited in the wild before the company applied a server-side fix to its infrastructure; the flaw stems from unsafe deserialization of untrusted data and affects the identity service underlying Microsoft 365, Azure, and Dynamics 365. Because Entra ID is a managed cloud service, Microsoft says remediation is complete with no customer action needed, but the advisory omits critical details including attribution, the exploitation window, affected tenant count, post-exploitation activity, and indicators of compromise—leaving security teams without independent means to verify exposure or review their own logs for signs of compromise.