Microsoft 365 - Page 2
Stories from Microsoft 365 come first, newest first, then stories from connected topics (Snowflake, cloud security, supply chain attack, Microsoft, phishing, Hub: Ransomware & Cyber Attacks), each labelled with where it comes from. This view is not indexed by search engines.
Latest
Microsoft Says North Korean Hackers Use AI to Scale Familiar Attacks
Microsoft says North Korean groups now use AI to speed up fake job lures and malware, but that their AI-enabled operations remain human-directed.
Socket Says 319 Chrome Extensions Hijacked Searches: How to Check
Socket says 319 Chrome extensions, installed 13.4m times over a decade, hijacked searches for Yahoo and Bing payouts. Here is how to check yours.
Cloudflare Q3 DDoS Report: Giant Attacks Fall, Short Bursts Surge
Cloudflare saw 18.2m network-layer DDoS attacks in Q3 2026, mostly short bursts, while attacks over 1 Tbps fell by nearly 69% from Q2.
Alpine Linux Rebuilds Its GitLab After Attack on CVE-2026-97229
An attacker came close to exploiting CVE-2026-97229 on Alpine Linux's GitLab. Alpine rebuilt it and says self-built GitLab also needs a Ruby fix.
Arara Says Hackers Took 3.01m Email Addresses From Its Mail Service
Paycloud unit Arara says attackers exploited a web server flaw and took about 3.01 million email addresses held by companies using its mail service.
CISA Lists ESXi Logging Flaw China-Linked Warp Panda Used as Zero-Day
CrowdStrike says China-linked Warp Panda used an ESXi flaw to act without being logged. CISA added it to KEV on 28 October. Fixed builds and checks.
Cisco Patches ASA and FTD VPN Zero-Day That Attackers Are Using
Upgrade now: Cisco says attackers are exploiting CVE-2026-76418 to reboot ASA and FTD firewalls via the SSL VPN. Fixed versions and checks inside.
Monero Swap Wagyu Confirms Three Months of Order Data Leaked
Wagyu's operator says three months of swap data leaked. Hudson Rock found 4,580 orders tying deposits to Monero addresses and IPs. Monero was not broken.
Allium Revokes API Keys After Unauthorised Access to Its Systems
Blockchain data firm Allium says it found unauthorised access to some systems on 25 October. It is revoking API keys and making users reset passwords.
zkLink Nova Bridge Drained of About $786,000, Blockaid Says
An attacker forged a batch root to pull ETH and 11 tokens out of zkLink Nova's Ethereum escrow. Blockaid estimates about $786,000; zkLink is silent.
Latest on TSN
Explore the TSN Atlas: Every topic we cover, mapped. Click a bubble to dive in.