Announcements

Broadcom VMware vCenter: Broadcom VMware vCenter Path Traversal Vulnerability

  • 19th August 2026
A security issue has been found in Broadcom VMware vCenter, a platform many website owners use to manage virtual server infrastructure for their online services. The flaw is a path traversal vulnerability, a type of security gap that lets unauthorized users access files and system areas they should not be able to reach.If a threat actor has ...
Continue reading

Microsoft Internet Key Exchange (IKE) Service Extensions: Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability

  • 19th August 2026
A security vulnerability has been identified in Microsoft's Internet Key Exchange (IKE) Service Extensions, a component used to manage secure network connections for systems running Microsoft software. The flaw is a "double free" error, a type of memory management bug that can be triggered remotely by an attacker, with no need for physical or ...
Continue reading

MA-1471.072026: MyCERT Advisory - Microsoft SharePoint Hardening After New Exploitations

  • 19th August 2026
A security advisory from Malaysia’s national cybersecurity agency (MyCERT) was published on 20 July 2026, addressing newly identified active exploits targeting Microsoft SharePoint. SharePoint is a widely used platform for collaborative document storage, team workflows, and internal business tools, many of which are hosted on web services.The ...
Continue reading

MA-1472.072026: MyCERT Advisory - Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability

  • 19th August 2026
A security advisory has been released by MyCERT for a vulnerability affecting Microsoft Active Directory Federation Services (AD FS), a tool used to verify user identities and manage access to online services and websites. The flaw is tied to the service having insufficiently granular access controls, meaning its permission rules are not detailed ...
Continue reading