tenfold has added shared content governance and real-time event auditing to its free Community Edition for organizations with under 150 users. The new features help teams manage Microsoft 365 sharing and investigate suspicious identity activity.
The Dev channel has been updated to 157.0.8081.0 for Windows, Mac and Linux. A partial list of changes is available in the Git log . Interested in switching release channels? Find out how . If you find a new issue, please let us know by filing a bug . The community help forum is also a great place to reach out for help or learn about common issues. Chrome Release Team Google Chrome…
The China-linked ransomware group Warlock targeted a water utility, a telecom provider, a regional government body, and a university by exploiting SharePoint vulnerabilities to gain initial access.
The Extended Stable channel has been updated to 152.0.7977.152 for Windows and Mac which will roll out over the coming days/weeks. A full list of changes in this build is available in the log . Interested in switching release channels? Find out how here . If you find a new issue, please let us know by filing a bug . The community help forum is also a great place to reach out for help or learn about common…
The group is exploiting a variety of vulnerabilities impacting Microsoft SharePoint, according to a new report from Symantec Threat Hunter Team.
The China-based hacking group has been exploiting SharePoint vulnerabilities since July 2025.
Hi, everyone! We've just released Chrome 154 (154.0.8037.126) for Android. It'll become available on Google Play over the next few days. This release includes stability and performance improvements. You can see a full list of the changes in the Git log . If you find a new issue, please let us know by filing a bug . Android releases contain the same security fixes as their corresponding Desktop releases (Windows &…
The Stable channel has been updated to 154.0.8037.97/.98 for Windows and Mac and 154.0.8037.97 to Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security changes will be updated shortly Interested in switching release channels? Find out how here . If you find a new issue, please let us know by filing a bug . The community help forum is also a…
Microsoft announced that Windows settings backup and restore is now enabled by default on all Microsoft Entra-joined or Microsoft Entra hybrid-joined enterprise systems upgraded to Windows 11 26H2.
The Stable channel has been updated to 155.0.8059.26/.27 for Windows and Mac a s part of our early stable release to a small percentage of users. A full list of changes in this build is available in the log . You can find more details about early Stable releases here . Interested in switching release channels? Find out how here . If you find a new issue, please let us know by filing a bug . The community help…
The Chrome team is excited to announce the promotion of Chrome 156 to the Beta channel for Windows, Mac and Linux. Chrome 156.0.8078.4 contains our usual under-the-hood performance and stability tweaks, but there are also some cool new features to explore - please head to the Chromium blog to learn more! A partial list of changes is available in the Git log . Interested in switching release channels? Find out how…
Microsoft has reminded customers that the Entra ID authentication system will get better protection against external script injection attacks starting next month.
Hi, everyone! We've just released Chrome 154 (154.0.8037.92) for Android. It'll become available on Google Play over the next few days. This release includes stability and performance improvements. You can see a full list of the changes in the Git log . If you find a new issue, please let us know by filing a bug . Android releases contain the same security fixes as their corresponding Desktop releases (Windows &…
The JadePuffer ransomware operator is targeting Azure tenants with agent-driven attacks that conduct reconnaissance, steal credentials, and destroy core components.
The "agentic threat actor" may have used exposed credentials to access resources and delete cloud-based storage, applications, and databases.
Microsoft details JADEPUFFER-linked Azure reconnaissance, resource deletion, and credential access using compromised service principals, identifying the activity as associated with Storm-3168 and providing guidance for defenders.
The Dev channel has been updated to 156.0.8072.0 for Windows, Mac and Linux. A partial list of changes is available in the Git log . Interested in switching release channels? Find out how . If you find a new issue, please let us know by filing a bug . The community help forum is also a great place to reach out for help or learn about common issues. Chrome Release Team Google Chrome…
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-65660 Microsoft SharePoint Code Injection Vulnerability CVE-2026-67279 Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the…
CISA lists this as exploited in the wild. Unpatched SharePoint and RouterOS systems are exposed to active attacks now.
Apply the vendor's security update for SharePoint and RouterOS.
CISA added CVE-2026-65660 (Microsoft SharePoint) to its Known Exploited Vulnerabilities catalog on September 25, 2026, which means there is reliable evidence of exploitation in the wild. Microsoft SharePoint contains a code injection vulnerability which could allow an authorized attacker to execute code over a network.
CISA lists this as exploited in the wild. Unpatched SharePoint systems are exposed to active attacks now.
Apply the vendor's security update for SharePoint.
A process parameter-poisoning technique evades EDR by injecting code into process initialization structures without using the Windows APIs that EDR tools typically watch out for.
The latest developments from the last 30 days, newest first.
tenfold CE: Our free Identity Governance tool just got 2 new features
Basis: Reporting by BleepingComputer
Chrome Dev for Desktop Update
Basis: Google Chrome Releases (vendor advisory)
Warlock ransomware breach SharePoint in water, telecom operator attacks
Basis: Reporting by BleepingComputer
Extended Stable Update for Desktop
Basis: Google Chrome Releases (vendor advisory)
'Warlock' ransomware used in attacks on critical infrastructure in Portuguese, Spanish-speaking countries
Basis: Reporting by The Record by Recorded Future News
Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks
Basis: Reporting by SecurityWeek
Chrome for Android Update
Basis: Google Chrome Releases (vendor advisory)
Stable Channel Update for Desktop
Basis: Google Chrome Releases (vendor advisory)
Microsoft SharePoint
Microsoft SharePoint Code Injection Vulnerability
Microsoft Windows
Microsoft Windows Link Following Vulnerability
Microsoft Windows
Microsoft Windows Heap-Based Buffer Overflow Vulnerability
Microsoft SQL Server
Microsoft SQL Server Remote Code Execution Vulnerability
Microsoft Internet Key Exchange (IKE) Service Extensions
Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability
Microsoft SharePoint
Microsoft SharePoint Weak Authentication Vulnerability
Microsoft Windows Ancillary Function Driver for WinSock
Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability
Microsoft SharePoint
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
Microsoft SharePoint
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
Microsoft SharePoint Server
Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability
Microsoft Active Directory Federation Services
Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability
Microsoft SharePoint Server
Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability
Microsoft Windows
Microsoft Windows Buffer Overflow Vulnerability
Microsoft DirectX
Microsoft DirectX NULL Byte Overwrite Vulnerability
Microsoft Internet Explorer
Microsoft Internet Explorer Use-After-Free Vulnerability
Microsoft Internet Explorer
Microsoft Internet Explorer Use-After-Free Vulnerability
Microsoft Defender
Microsoft Defender Link Following Vulnerability
Microsoft Defender
Microsoft Defender Denial of Service Vulnerability
Microsoft Microsoft
Microsoft Exchange Server Cross-Site Scripting Vulnerability
Microsoft Windows
Microsoft Windows Protection Mechanism Failure Vulnerability
