CyberPulse Cybersecurity News, with Source Links
FA
CSO Online

Microsoft’s email security is unexpectedly blocking legitimate business mail

Microsoft’s email filters meant to protect users from malicious messages appear to be rejecting legitimate ones. Over the last few days, some mail sent to Microsoft consumer addresses have bounced if they did not publish a domain-based message authentication, reporting, and conformance (DMARC) record. This includes messages to Outlook, Hotmail, Live, and MSN. The refusals began November 5 and are ongoing as of public…

Phishing Networking & Internet Identity & Access Security
Read the full article at CSO Online Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →
CSO Online

SonicWall releases patches for 7 flaws in its firewalls, most involving unauthenticated access

SonicWall on Monday updated its advisory about seven cybersecurity holes affecting its Gen 7 and Gen 8 firewalls, five of which allow unauthenticated remote attacks, to warn that it is aware of “potential” active exploitation of at least one of the bugs, CVE-2026-19868, a bypass of SAML authentication controls in its SonicOS SSL VPN service. And Frank Dickson, principal analyst at Dickson Research, pointed out that t…

Malware & Threats Vulnerabilities & Zero-Day Botnet & DDoS
Source
Ubuntu Security Notices

USN-8890-3: libsoup regression

USN-8890-1 fixed vulnerabilities in libsoup. Unfortunately, that update introduced a memory leak in the cookie jar and could introduce a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that libsoup incorrectly handled certain HTTP/2 requests. A remote attacker could possibly use this issue to cause a denial of service. This issue only affecte…

Vulnerabilities & Zero-Day Data Breach Botnet & DDoS
Source
Tenable Blog

U.S. urges critical infrastructure orgs to secure refrigeration systems ASAP after EU supermarket and blood bank attacks

Following recent cyber attacks on French blood banks and European supermarkets, U.S. federal agencies are urging critical infrastructure organizations to immediately secure industrial refrigeration systems against remote tampering and temperature manipulation.Key takeawaysCybercriminals are actively targeting unpatched flaws, misconfigurations, and weak or hard-coded passwords in commercial cold-chain and refrigerati…

Vulnerabilities & Zero-Day Supply Chain Security IoT & OT Security
Source
Proofpoint

BluePhishing: Initial Access via Third-Party Agent Blueprint Consent

Key TakeawaysMicrosoft Entra Agent Identity extends Entra to AI agents and closely mirrors the traditional application model, inheriting many of the same opportunities for abuse.Proofpoint researchers present “BluePhishing” as the next evolution of OAuth consent abuse, enabling attackers to leverage agent identities for initial access.Attackers can configure the blueprint with inheritable permissions and requiredReso…

Phishing Operating Systems Identity & Access Security
Source