A security flaw has been found in Microsoft’s Internet Key Exchange (IKE) Service Extensions, a component that handles secure network connection setup for systems using Microsoft’s IKE protocol. The flaw is categorized as a "double free" vulnerability, a type of programming error that can cause systems to behave in unpredictable, unstable ...
Continue reading
A security flaw has been identified in MLflow, a tool some users run on their hosting accounts to manage machine learning projects. The issue is a server-side request forgery (SSRF) vulnerability, which allows attackers to trick the MLflow tool into sending requests to services it is not intended to access.If exploited, this flaw could let bad ...
Continue reading
A security advisory was issued by Malaysia’s national cybersecurity response team (MyCERT) on 20 July 2026, warning of newly observed active attacks targeting Microsoft SharePoint, a common tool businesses use to share files, collaborate on projects, and manage internal resources.
For any clients running Microsoft SharePoint for their website or ...
Continue reading
On July 22, 2026, MyCERT published a security advisory identifying a vulnerability in Microsoft Active Directory Federation Services (AD FS), a common tool used to manage user access to online platforms and services. The issue is classified as insufficient granularity of access control, meaning the system’s permission settings are not precise ...
Continue reading
