Fix-CVE-2023-36884

Fix-CVE-2023-36884.ps1 Temporary solution to mitigate the vulnerability CVE-2023-36884. This vulnerability affects the Windows operating system and may allow remote code execution. CVE-2023-36884 » CVE-2023-36884 The CVE-2023-36884 vulnerability, which is a critical security flaw that can result ...

com.github.cloudbow:rmq-publisher (>=0.0.1, <=0.0.6), io.latent:storm-rabbitmq (1.0.0) +3 more potentially affected by CVE-2026-106121 via com.rabbitmq:amqp-client (3.5.0)

com.rabbitmq:amqp-client MAVEN version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.cloudbow:rmq-publisher =0.0.1, =2.3.0, =2.3.0, =2.4.5 - ru.kiryam:storm-rabbitmq 0.6.2 Source cves:...

com.github.cloudbow:rmq-publisher (>=0.0.1, <=0.0.6), io.latent:storm-rabbitmq (1.0.0) +3 more potentially affected by CVE-2026-106122 via com.rabbitmq:amqp-client (3.5.0)

com.rabbitmq:amqp-client MAVEN version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.cloudbow:rmq-publisher =0.0.1, =2.3.0, =2.3.0, =2.4.5 - ru.kiryam:storm-rabbitmq 0.6.2 Source cves:...

com.github.cloudbow:rmq-publisher (>=0.0.1, <=0.0.6), io.latent:storm-rabbitmq (1.0.0) +3 more potentially affected by CVE-2026-106123 via com.rabbitmq:amqp-client (3.5.0)

com.rabbitmq:amqp-client MAVEN version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.cloudbow:rmq-publisher =0.0.1, =2.3.0, =2.3.0, =2.4.5 - ru.kiryam:storm-rabbitmq 0.6.2 Source cves:...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: serial: 8250omap: Implementation of Errata i2310 According to Errata i23100, an erroneous timeout can be triggered if this erroneous interrupt is not cleared. This could lead to a surge in interrupts. Therefore, the Errata i2310...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: xgmac: Fixed the handling of Data Path Parity Errors for DMA channels. The commit 56e58d6c8a56 „net: stmmac: Implement Safety Features in XGMAC core“ checks for safety errors, but leaves Data Path Parity Errors for...

​​Beyond source code: A path to the keys to the kingdom

What began as a single compromised identity quickly expanded into an organization's development and cloud environments. In our latest Cyberattack Series report, we examine how the Microsoft Detection and Response Team DART—the team that delivers Microsoft Defender Experts Cybersecurity Incident...

CVE-2026-93830

A flaw was found in the Linux kernel's stmmac network driver. An attacker can cause a Denial of Service DoS by sending high volumes of network traffic to an affected system. Under heavy packet load, the network controller exhausts its receive buffers and continuously fires hardware interrupts...

Hackers Use NeedyMantis to Maintain Long-Term Access in Breached Networks

Hackers have used a malware family called NeedyMantis to maintain long-term access to networks they had already breached, Microsoft said in a technical analysis. The malware has been seen in a small number of targeted intrusions at telecommunications organizations, universities, medical nonprofit...

CVE-2026-97515

A flaw was found in the Linux kernel's I3C Improved Inter-Integrated Circuit master driver. On affected hardware, when a target device on the bus holds the data line low, the controller triggers an interrupt feedback loop during recovery attempts. This issue creates an interrupt storm that can...

JADEPUFFER-Linked Attackers Used Compromised Service Principals to Delete Azure Resources

The threat actor known as JADEPUFFER has been observed orchestrating destructive actions within a Microsoft Azure environment using compromised service principals. Microsoft, which is tracking the activity under the name Storm-3168 , has called it an evolution of the threat actor's tradecraft. Th...

Storm-3168: Agentic-driven cloud attacks using compromised service principals

In this article 1. Attack overview 2. Technical analysis 3. Mitigation and protection guidance 4. References 5. Learn More Microsoft Security Research has identified malicious cloud activity associated with JADEPUFFER, a threat actor discovered by Sysdig in July 2026 and reported to be the first...

Storm-3168: Agentic-driven cloud attacks using compromised service principals

In this article 1. Attack overview 2. Technical analysis 3. Mitigation and protection guidance 4. References 5. Learn More Microsoft Security Research has identified malicious cloud activity associated with JADEPUFFER, a threat actor discovered by Sysdig in July 2026 and reported to be the first...

SUSE CVE-2026-93830

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: xgmac2: disable RBUE in default RX interrupt mask Enabling the RX Buffer Unavailable RBUE interrupt is counterproductive and can trigger a MAC interrupt storm under heavy RX pressure. When the DMA runs out of RX...

SUSE CVE-2026-97515

In the Linux kernel, the following vulnerability has been resolved: i3c: master: svc: Prevent IRQ storm from false SLVSTART on NPCM845 On NPCM845, when a target on the I3C bus gets stuck holding SDA low, the controller reports a false Master Request MR in-band interrupt event. The driver handles...

DEBIAN-CVE-2026-97515

In the Linux kernel, the following vulnerability has been resolved: i3c: master: svc: Prevent IRQ storm from false SLVSTART on NPCM845 On NPCM845, when a target on the I3C bus gets stuck holding SDA low, the controller reports a false Master Request MR in-band interrupt event. The driver handles...

CVE-2026-97515

In the Linux kernel, the following vulnerability has been resolved: i3c: master: svc: Prevent IRQ storm from false SLVSTART on NPCM845 On NPCM845, when a target on the I3C bus gets stuck holding SDA low, the controller reports a false Master Request MR in-band interrupt event. The driver handles...

AZL-103820 CVE-2026-97515 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: i3c: master: svc: Prevent IRQ storm from false SLVSTART on NPCM845 On NPCM845, when a target on the I3C bus gets stuck holding SDA low, the controller reports a false Master Request MR in-band interrupt event. The driver handles...

CVE-2026-93830

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: xgmac2: disable RBUE in default RX interrupt mask Enabling the RX Buffer Unavailable RBUE interrupt is counterproductive and can trigger a MAC interrupt storm under heavy RX pressure. When the DMA runs out of RX...

AZL-103920 CVE-2026-93830 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: net: stmmac: xgmac2: disable RBUE in default RX interrupt mask Enabling the RX Buffer Unavailable RBUE interrupt is counterproductive and can trigger a MAC interrupt storm under heavy RX pressure. When the DMA runs out of RX...