Announcements

MA-1472.072026: MyCERT Advisory - Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability

  • 23rd August 2026
Malaysia’s national cybersecurity agency (MyCERT) issued an advisory on July 22, 2026, identifying a security vulnerability in Microsoft Active Directory Federation Services (AD FS), a tool many organizations use to let users log in once to access multiple websites, apps and internal systems. The flaw stems from the service’s access control ...
Continue reading

MA-1473.072026: MyCERT Advisory - Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability

  • 23rd August 2026
A security advisory was published on July 22, 2026, identifying a vulnerability in Microsoft SharePoint Server. The flaw is categorized as a missing authentication for critical function issue.In simple terms, this means that key, sensitive features of SharePoint Server do not require users to verify their identity before they can be accessed. For ...
Continue reading

MA-1474.072026: MyCERT Advisory - Critical Vulnerability in Zoom Products

  • 23rd August 2026
On 22 July 2026, cybersecurity authority MyCERT released an advisory confirming a critical security vulnerability exists in Zoom’s suite of products. A critical vulnerability is a serious security flaw that attackers can exploit to gain unauthorized access to systems, steal private data, or disrupt normal services without permission. If you use ...
Continue reading

MA-1475.072026: MyCERT Advisory - Oracle E-Business Suite Improper Privilege Management Vulnerability

  • 23rd August 2026
A security advisory from MyCERT, published on 22 July 2026, has been released for a vulnerability in Oracle E-Business Suite related to improper privilege management. This type of flaw means the software may fail to correctly restrict who can access or change certain data and system features, which could let unauthorized users get access to ...
Continue reading