Data & infrastructure
-
Microsoft warns unsupported Windows devices could lose update connections in 2027
Certificate expiry in May and June 2027 creates an update-service dependency for Windows devices that have not received replacement trust certificates.
-
AgentCore research shows how exposed AI agents could cross cloud boundaries
Zenity researchers describe how prompt injection, instance metadata and broad default permissions could expose multiple AWS Bedrock AgentCore agents.
-
Microsoft urges early testing of post-quantum certificate authentication
Microsoft says certificate-dependent systems need early interoperability testing as post-quantum authentication becomes a practical infrastructure migration challenge.
-
IBM security fixes span databases, analytics and authentication software
France’s cyber authority has flagged an October collection of IBM vulnerabilities affecting databases, QRadar components and enterprise authentication services.
-
Attackers turn compromised backup servers into cryptocurrency miners
Attackers are exploiting flaws in AhsayCBS backup software to establish persistent access and install cryptocurrency miners, threatening infrastructure used by managed service providers.
-
SonicWall exploitation attempts observed after critical SMA1000 patch
Independent honeypot research indicates attacks targeting a newly patched SonicWall gateway vulnerability, although successful compromise has not been established.
-
Tenable Identity Exposure fix requires listener reinstall after critical flaw
A command injection vulnerability in Tenable’s identity monitoring software can expose sensitive Active Directory infrastructure unless fully remediated.
-
Nextcloud fixes expose security gaps across collaboration components
French cyber authorities warn of vulnerabilities affecting Nextcloud server software, team folders, locking, and collaborative applications.
-
Cisco patches critical flaws in on-premises licence management software
Cisco has issued critical fixes for License On-Prem systems, including a security hardening release with a maximum CVSS score and no available workarounds.
-
Swiss pension fund investigates supplier breach affecting sensitive information
Swiss federal pension fund Publica is assessing a data leak associated with an attack on an external software supplier, as federal authorities investigate the incident and its consequences for information handl