Announcements

Ray-Project Ray: Ray-Project Ray Code Injection Vulnerability

  • 17th August 2026
A security vulnerability has been identified in Ray, a tool commonly used by developers to build and test applications. This is a code injection flaw, which could allow an attacker to run unauthorized, malicious code on any system where Ray is in use.This vulnerability can be exploited when accessing Ray through the Firefox or Safari web browsers. ...
Continue reading

MA-1472.072026: MyCERT Advisory - Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability

  • 17th August 2026
A security advisory published by MyCERT on July 22, 2026, outlines a vulnerability in Microsoft Active Directory Federation Services (AD FS), a widely used tool that manages user sign-ins and access permissions for business applications and services. The flaw relates to insufficiently precise access controls, which could allow unauthorized users ...
Continue reading

MA-1473.072026: MyCERT Advisory - Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability

  • 17th August 2026
We are sharing a security advisory published by MyCERT on 22 July 2026 regarding a vulnerability in Microsoft SharePoint Server. The advisory identifies a "missing authentication for critical function" flaw. In simple terms, this means a core feature of the software does not properly require users to prove they are authorized to access it. For ...
Continue reading