CVE-2026-26124

'.../...//' in Azure Compute Gallery allows an authorized attacker to elevate privileges locally...

CVE-2026-26124

CVE-2026-26124 concerns Microsoft ACI Confidential Containers with elevation of privilege in Azure Compute Gallery. The description indicates an authorized attacker can locally elevate privileges via a flaw described as '.../...//' in the Compute Gallery. Connected advisories show Microsoft fixed...

[SECURITY] Fedora 42 Update: rust-az-tdx-vtpm-0.7.4-1.fc42

VTPM based TDX attestation for Azure Confidential VMs...

Microsoft Secures MSA Signing with Azure Confidential VMs Following Storm-0558 Breach

Microsoft on Monday announced that it has moved the Microsoft Account MSA signing service to Azure confidential virtual machines VMs and that it's also in the process of migrating the Entra ID signing service as well. The disclosure comes about seven months after the tech giant said it completed...

Malicious code in azure-confidential-ledger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 990af1e5ea3a4d642497c5f273b8dcebb97f2f5b201295507b68326d1b424b52 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-confidential-ledger-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0f02d4f978871b6e194c6be41add4e205a8e70c5f06030d0cb9dab00e52ba19 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-confidential-ledger-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d670e394d24ec41bc269868b666ded7112cb794ac280f1a6ed52c2291fab5d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1309 Malicious code in azure-confidential-ledger-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9d670e394d24ec41bc269868b666ded7112cb794ac280f1a6ed52c2291fab5d8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...