Bland.at/news
The U.S. Department of Homeland Security (DHS) is ordering federal civilian agencies to stop using DeepSeek products and remove them from government systems. [...]
CJIS v6.1 requires agencies to maintain strong authentication, account security, and audit controls while demonstrating ongoing compliance. Specops outlines five practical priorities covering MFA, account management, passwords, logging, and audit readiness. [...]
French cloud and hosting provider OVHcloud is warning users that attackers compromised its open-source command-line interface (CLI) tool to distribute information-stealing malware. [...]
Hackers reportedly compromised AOMEI's servers to distribute malware through a built-in promotional feature in its backup software, briefly tampering with configuration files before restoring them to their original state to hide the attacks.a [...]
Organizations running on-premises Microsoft Exchange Server encountered unexpected stability issues after installing October 2026 Windows Server updates. Microsoft has acknowledged that the updates could cause Exchange services to become unreliable in certain environments, particularly those handling heavier workloads. Administrators reported probl
Many organisations still rely on Microsoft Application Virtualization (App-V) Server to deliver Win32 applications without installing them locally. Microsoft ended support for App-V Server in April 2026, but some customers had not yet completed their transition to newer application delivery technologies. Microsoft’s decision to restore the product
The open-source AI coding project OpenCode has notified a small number of users that API keys they used with external providers were exposed in a security breach. [...]
One question I still hear regularly from IT pros planning a new rollout is whether it’s acceptable to install a certificate authority (CA) on a domain controller. The short answer is yes. Microsoft fully supports installing Active Directory Certificate Services on a domain controller, and the setup process doesn’t prevent you from doing so. Howeve
New capabilities in Microsoft 365 E7 and Project Perception help organizations contain agent risk and adapt protection continuously. The post Agents are your newest insiders. Security must move at their speed. appeared first on Microsoft Security Blog .
Microsoft has resolved a bug that caused games and apps using AC-3 (Dolby Digital) audio decoding to crash after installing the September 2026 Windows 11 preview update (KB5124010). [...]
F5 has released out-of-band security patches to address multiple NGINX web server flaws, including three critical-severity vulnerabilities that can let attackers execute code on vulnerable systems. [...]
Microsoft has fixed a known issue that removed the Copilot Chat and Copilot buttons in the classic Outlook desktop mail client for some Windows users. [...]
Microsoft has confirmed that this month's Windows Server security updates are causing OWA sign-in and mail delivery issues on some Exchange Server systems. [...]
Microsoft October 2026 Patch Tuesday fixes 1,411 flaws, 3 zero-days
Windows 11 KB5127648 & KB5126653 cumulative updates released
Hackers breach Microsoft 365 tenants via ConnectWise supply-chain attack
Drupal patches critical RCE flaws, warns exploits may emerge soon
Attackers are targeting an OS command injection vulnerability in SiteGuard Server Edition that lets them execute commands as root or SYSTEM on affected servers. [...]
New whitepaper from Microsoft and NVIDIA helps enterprises manage open-weight AI model risks with a shared taxonomy, evaluations, and controls. The post Managing open-weight model risk in enterprise deployments appeared first on Microsoft Security Blog .
Organizations have spent years strengthening endpoint and network defenses, but attackers are increasingly bypassing those controls by targeting identities, trusted cloud services, and everyday collaboration tools. A new study found that phishing campaigns, token theft, session hijacking, and fake IT support scams delivered through platforms like M
Microsoft's October 2026 Patch Tuesday updates fix 1,415 CVEs, including two zero-days and 80 critical flaws affecting Windows, and more.
Microsoft has introduced new Entra capabilities focused on authentication, identity governance, external user access, and secure connectivity.
Microsoft is preparing IT admins for Windows Update certificate expiration and urging them to ensure devices receive replacement certificates.
Employees using personal ChatGPT accounts at work can expose sensitive company data, even when their organization provides an approved Enterprise workspace. NordLayer explains how IT teams can investigate unauthorized AI
Microsoft says some users may have trouble turning on Smart App Control after installing this month's KB5127648 Windows 11 security update.