How one AI agent exposed gaps in enterprise security
An AI agent built by someone in accounts…
Updated 5 minutes ago
Tech news, decoded.
AI, security, automation, cloud and self-hosting — explained without the noise.
Trending now
Latest articles
Fresh from the blog: news, security alerts and hands-on how-tos. Keep scrolling for more.
Microsoft says November updates break Windows activation
Microsoft has confirmed that this month’s Patch Tuesday security updates are causing Windows activation and licensing failures with 0x80041008 error codes. The issue affects organizations that automate Windows activation and licensing processes, along with users of the Software Licensing Management Tool, or SLMGR. Affected devices can hit error 0x80041008, listed as Invalid parameter (SWbemObjectEx), when they run commands to activate Windows, configure Key Management Service, or manage product keys. Microsoft…
Microsoft 365 outage recovery stalls as restored servers fail under load
Microsoft is still working through a global Microsoft 365 outage that has lasted more than 10 hours. The disruption began on November 12, 2026, with Exchange Online mailbox access failures in the Americas, and it spread to Outlook, Teams, SharePoint, Copilot, and Microsoft Defender XDR users in any region. The company has not yet found a fix that holds. Servers that engineers return to service keep becoming unresponsive again once…
Microsoft warns November 2026 security updates may disrupt printing
Microsoft warned customers earlier this week that the November 2026 security updates may break printing for documents with complex formatting. The issue affects people trying to print documents with images that have zero height or width on server devices running Windows Server 2016 or later and on client devices running Windows 10 or later. Printing with zero-height images is the issue Microsoft is investigating Microsoft said the problem appears after…
Microsoft extends Outlook and SharePoint outage as recovery still stalls
Microsoft’s cloud outage has affected Outlook, Exchange Online, SharePoint, and Teams, and the company is still working to restore normal service after nearly half a day. Charles Lamanna, Microsoft’s Executive Vice President of Business and Industry Copilot, Agents, and Platform, apologized for the disruption and said there was no indication of malicious activity or a cyberattack. Service recovery remains incomplete The disruption first hit Microsoft Teams, and Microsoft later confirmed…
Red Hat Quay flaws expose private images and tenant tokens
Red Hat Quay has two critical flaws that let attackers reach private container images and other tenants' robot account tokens. One flaw affects any Quay registry an attacker can access, and the other lets a Quay user who can create a namespace steal robot account tokens from other tenants. Quay registry access and key trust The first flaw gives an attacker the ability to read and overwrite private images in…
Google Cloud orders Turin VM patches and restarts for three AMD CPU flaws
Google Cloud says virtual machines on AMD Turin chips need a guest operating system patch and a stop-start cycle to reduce exposure to three CPU side-channel flaws. It says the current mitigations already cover attacks between virtual machines and between virtual machines and the host, while the inside-a-VM risk remains for an attacker running code on the same processor core. Affected Google Cloud services and machine types The affected machine…
ScreenConnect panels used to push SCKit to 288 devices
Attackers took over cloud-hosted ConnectWise ScreenConnect panels and used them to push a custom toolkit called SCKit to at least 288 managed devices across 48 organizations. Huntress first saw the activity on November 11, 2026, and says all 288 hosts were hit within about 90 minutes. Cloud panel abuse and rapid spread The attacker used ScreenConnect’s Run command feature to send commands to many endpoints at once. Those commands ran…
Node.js release closes 16 security holes across three supported lines
The Node.js project has released fixes for 16 security flaws across its 22.x, 24.x and 26.x lines. Seven are rated high, six medium, and three low. The patched builds are v22.23.5, v24.22.3 and v26.13.1, and the update also refreshes three bundled parts: llhttp, undici and sqlite. Remote memory exposure and server crashes The most serious issue is CVE-2026-123864, which affects the HTTPS code in all three lines. A client with…
PowerShell 7.7 adds .NET 11 support and new admin features
PowerShell 7.7 is generally available with a .NET 11 base, new commands, stronger security protections, and several breaking changes. It is the next Standard Term Support release, and PowerShell 7.6 was based on .NET 10. PowerShell 7.7 release details PowerShell 7.7 continues the alignment between PowerShell and .NET releases. The update shifts the utility onto .NET 11 and keeps its focus on security improvements, broader command support, and higher reliability.…
Windows updates tighten NTLM signing in phased enforcement
Microsoft is adding phased NTLM signing enforcement in Windows after the latest Patch Tuesday updates. The change comes alongside protections against CVE-2026-118737, a critical severity vulnerability tied to remote code execution on a network through improper verification of a cryptographic signature in Windows Remote Procedure Call Runtime. NTLM changes in Windows Microsoft has been phasing out NTLM authentication in Windows in favor of Kerberos-based alternatives over the past few years.…
eMudhra revokes eight more CA certificates after key handling flaws
eMudhra has revoked eight additional intermediate CA certificates after an investigation into its certificate security incident found improper handling of private keys during certificate generation. The new revocations bring the total affected intermediate CA certificates to 16, and the company says the incident also exposed an earlier warning sign that went unchecked for more than a year. Additional certificate revocations The newly revoked set consists of eight RSA intermediate CA…
Windows 11 update tightens PowerShell script checks
Microsoft’s November Patch Tuesday update KB5132061 adds stricter text-encoding validation for PowerShell script signing and signature verification. Older scripts that were signed before this change can fail if they contain invalid text encoding, including malformed UTF-8. PowerShell signing checks change in KB5132061 Microsoft released its November batch of Patch Tuesday updates earlier this week, bringing the usual security fixes and improvements to Windows 11. One change in the release notes…