Microsoft’s September Remote Desktop Repair Needs the Right Windows Build
Start with the installed Windows build, then investigate any black desktop that persists after sign-in.
Rob Nidschelm
Tech tinkerer who spends too much time with home labs and Docker stacks. Into AI, Roman & Medieval history, and all things sci-fi. Avid traveller, reader and writer, with a passion for good food.
CISA Says Attackers Are Exploiting GitLab’s CVSS 10 File-Read Flaw
CISA says attackers are exploiting CVE-2026-85706, a CVSS 10 GitLab flaw that can expose arbitrary server files without authentication. Self-managed operators need to update and investigate.
One Contractor Session Exposed Data Tied to 4.1 Million People
One compromised contractor session opened cloud applications, patient systems and external health-record portals. HHS says the AdaptHealth breach affected 4,115,802 people.
These Earbuds Pair With Strangers Without Asking, and the Microphone Comes With Them
A nearby device can pair with affected Skullcandy Dime 3 earbuds without pairing mode, a PIN or owner approval. It can then interrupt audio and reach the headset microphone.
The Security Extension Could Send Your Browser Through an Attacker’s Server.
A malicious website could turn Fortinet’s privileged-access browser extension into the path to attacker-controlled proxy infrastructure. Fixing it requires both server and extension updates.
The WatchGuard Firebox Flaw Patched Nearly Nine Months Ago Is Now Tied to Ransomware
CISA now marks CVE-2025-14733 as used in ransomware campaigns. WatchGuard Firebox operators need to patch, investigate and rotate stored secrets.
The Phone Was Still Ringing. WeChat Had Already Lost the Account.
Researchers built a wormable WeChat account takeover that required no answer or tap. Tencent says the path is fixed and there is no evidence attackers used it.
The Phishing Email Really Came From Trezor. That Was the Problem.
Brevo closed the SSO path behind the Trezor phishing incident. Four days later, the attackers returned through a Cloudflare key and reached scripts embedded across customer websites.
The Vendor Credentials Opened One API. Patient Social Security Numbers Left Through It.
The attacker did not need broad network access. Veradigm says credentials stolen from a third-party vendor were enough to copy patient data through one customer-service API.
A Malformed XML Request Can Give an Attacker Root on Palo Alto Hardware Firewalls
Palo Alto Networks has fixed a high-severity XML-processing flaw. The same request can crash VM-Series systems or enable root-level code execution on affected PA-Series hardware.