On-Prem Microsoft Exchange Server CVE-2026-42897 Exploited via Crafted Email
What's new: Microsoft has disclosed CVE-2026-42897, a spoofing vulnerability affecting on-premise versions of Exchange Server, which is currently being exploited...
Network Security
TanStack Supply Chain Attack Hits Two OpenAI Employee Devices, Forces macOS Updates
What's new: OpenAI reported that two employee devices were compromised in a supply chain attack targeting TanStack. The attack involved...
NSAuditor AI EE 0.5.1 Ships SQS/SNS Auditor v2 — CloudWatch Alarm Coverage on ApproximateAgeOfOldestMessage + NumberOfNotificationsFailed; R-CRITICAL Empty-AlarmActions Silent-PASS Closure
What's new: Nsasoft US LLC has shipped NSAuditor AI Enterprise Edition 0.5.1 — a patch-level extension in the v0.5.x line...
NSAuditor AI EE 0.5.0 Ships SES Email Integrity Auditor v2 — DKIM CNAME DNS Resolution + DMARC TXT Parser + SES Classic API Parity; First Network-Layer Cross-Reference in the EE Evidence Baseline
What's new: Nsasoft US LLC has shipped NSAuditor AI Enterprise Edition 0.5.0 — the minor-version milestone bump from 0.4.x. The...
Grafana GitHub Token Breach Led to Codebase Download and Extortion Attempt
What's new: Grafana reported a breach where an unauthorized party accessed its GitHub environment using a compromised token, allowing them...
