CyberPulse Cybersecurity News, with Source Links
FA
SOCRadar

CVE-2026-109469: CVSS 10 Entra Device Registration Flaw

Microsoft has disclosed CVE-2026-109469, a critical elevation of privilege vulnerability in Entra Device Registration, the cloud service that registers and joins devices to Microsoft Entra ID. The flaw carries a maximum CVSS score, meaning that an unauthenticated attacker could exploit it over the network with no user interaction. Customers have nothing to patch. Microsoft says […]

Vulnerabilities & Zero-Day
Read the full article at SOCRadar Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →
Help Net Security

CISA tweaks cyber incident form to spot attacks that might be linked

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has updated its online incident reporting form to help analysts spot when attacks on different organizations may be part of the same campaign. The revised questionnaire asks more specific questions and removes duplicate ones. The form asks whether an incident involved malware, attempts to trick people, hacking techniques, or an insider threat. It also u…

Malware & Threats Vulnerabilities & Zero-Day
Source
Orca Security

Shadow AI Generated Apps: Find Them in the Cloud and Code You Already Scan

The Orca Research Pod recently found that 51% of organizations have adopted AI to build software, yet 81% have critical vulnerabilities in AI packages (Hacker Valley News, 2026). In 2025, CVE-2025-48757 showed how a single missing database policy in AI-generated Supabase projects exposed data across more than 170 production apps. None of these apps went […]

Vulnerabilities & Zero-Day Databases
Source