Tag

security

8 stories

Telegram Stickers, Zero-Click Risks, and the Race to Patch rlottie

Security researcher Saifeldeen Aziz has revealed a worrying set of findings about Telegram’s animated sticker handling: zero-click bugs in the sticker engine that he says can be chained to achieve code execution on iOS. His work — scheduled for presentation at OffensiveCon in Tokyo — follows a long-running exchange between researchers and Telegram about whether server-side checks are an adequate mitigation for client-side flaws. How the flaw was characterized ZDI…

Saugata DattaOct 29, 20263 min read79

Cloud Computing

Microsoft Teams adds context-aware AI to detect phishing in chats

Microsoft is rolling out an AI-powered, context-aware phishing detection feature in Teams intended to spot phishing, social engineering, impersonation attempts, and deceptive intent by analyzing conversation context rather than relying solely on traditional indicators like malicious links or files. The company announced the capability in a Microsoft 365 Message Center update and indicated the rollout will begin in early November 2026 as a targeted release, with broader availability expected between…

Saugata DattaOct 24, 20262 min read115

Cloud Computing

Ruby, GitLab and the Onigmo Flaw: What You Need to Know Now

Ruby shipped emergency patches this week after three bugs in Onigmo, the language’s regular expression engine, were found to underlie four critical GitLab remote code execution (RCE) vulnerabilities. The issues let specially crafted patterns corrupt memory during regex compilation, and because GitLab compiles user-supplied patterns in some features, the result was severe: multiple high-severity CVEs, including unauthenticated 10.0-rated flaws. This post explains what happened, who’s at risk, and the practical…

Saugata DattaOct 24, 20264 min read136

Cloud Computing

Windows Server 2016: Why January 2027 Is a Hard Deadline for Administrators

Microsoft’s long-term support clock for Windows Server 2016 is winding down: the January 2027 security update will be the last one published for this OS, and after January 12, 2027, systems still running Windows Server 2016 will no longer receive monthly security updates. That simple sentence changes the risk profile for any environment still depending on 2016-era servers. If your estate includes domain controllers, application servers, or infrastructure appliances on…

Saugata DattaOct 24, 20264 min read145

Cybersecurity

Microsoft Teams’ Efficiency Mode Arrives for Low‑End Devices

Microsoft is rolling out an Efficiency Mode for Microsoft Teams designed to help devices with limited CPU and memory run the app more smoothly. Announced in a Microsoft message center update, the feature will be enabled by default on eligible hardware and aims to improve responsiveness and meeting quality by dynamically adjusting how Teams uses system resources. What Efficiency Mode Does Efficiency Mode reduces resource consumption by changing a few…

Saugata DattaApr 22, 20264 min read383

Cybersecurity

Micropatches for Windows Shell Bypass (CVE-2026-21510): What 0patch Fixed and Why It Matters

Microsoft released fixes earlier this year for CVE-2026-21510, a security feature bypass in Windows Explorer that let specially crafted shortcut (LNK) files execute a remotely hosted DLL without the usual security warning. Researchers observed exploitation in the wild and uploaded a sample to malware repositories, enabling vendors and defenders to reproduce the issue and protect legacy systems that no longer receive timely official updates. This post explains how the vulnerability…

Saugata DattaApr 14, 20264 min read465

AI Agents and Frameworks

Inside the Claude Code Leak: What Anthropic’s Accidental Release Reveals

Anthropic, the AI company behind the Claude family of agents, suffered an unexpected exposure that rippled across the developer community and the wider AI market. Earlier today, a sizable JavaScript source map file—bundled with a public npm release—made internal implementation details of Claude Code visible to anyone who downloaded it. What began as a packaging mistake quickly became a public forensic exercise: researchers mirrored a half-million-line TypeScript codebase, poring over…

Saugata DattaApr 1, 20265 min read473

AI Agents and Frameworks

Claude Opus 4.6: Anthropic’s powerful model for coding, agents, and enterprise workflows is now available in Microsoft Foundry

Claude Opus 4.6 represents a clear evolution in applying frontier language models to mission-critical enterprise workloads. By combining Anthropic’s latest reasoning and long-context capabilities with Microsoft Foundry’s governance, identity, and operational controls, organizations can transition from isolated experiments to production-grade, agent-driven systems. This release is significant because it is not merely about raw model performance; it is about enabling sustained, auditable workflows that touch codebases, regulated documents, and multi-application automation.…

Saugata DattaFeb 7, 20267 min read1K

Free Tools: IP, DNS, SSL