Microsoft Patches Entra ID Role Flaw That Enabled Service Principal Takeover

An administrative role meant for artificial intelligence AI agents within Microsoft Entra ID could enable privilege escalation and identity takeover attacks, according to new findings from Silverfort. Agent ID Administrator is a privileged built-in role introduced by Microsoft as part of its agen...

CVE-2026-28193

In JetBrains YouTrack before 2025.3.121962 apps were able to send requests to the app permissions endpoint...

EUVD-2026-8651

In JetBrains YouTrack before 2025.3.121962 apps were able to send requests to the app permissions endpoint...

CVE-2026-28193

In JetBrains YouTrack before 2025.3.121962 apps were able to send requests to the app permissions endpoint...

CVE-2026-28193

In JetBrains YouTrack before 2025.3.121962 apps were able to send requests to the app permissions endpoint...

CVE-2026-28193

CVE-2026-28193 (JetBrains YouTrack) : Affects YouTrack builds prior to 2025.3.121962 where apps could send requests to the app permissions endpoint. The CVSS 3.1 vector is CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H with base score 8.8 (HIGH). Attack vector: NETWORK; Attack complexity: LOW; Priv...

CVE-2026-28193

In JetBrains YouTrack before 2025.3.121962 apps were able to send requests to the app permissions endpoint...

CVE-2026-28193

In JetBrains YouTrack before 2025.3.121962 apps were able to send requests to the app permissions endpoint...

PT-2026-21903

Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2025.3.121962 Description The software allows applications to send requests to the app permissions endpoint without authorization. This could lead to unauthorized actions related to application permissions...

ASB-A-301952571

In DefaultTransitionHandler.java, there is a possible way to unknowingly grant permissions to an app due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

About the security content of tvOS 26.1

About the security content of tvOS 26.1 This document describes the security content of tvOS 26.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

EUVD-2019-6398

Malware in sbrugna...

EUVD-2019-6433

Malware in sbrugna...

EUVD-2019-6402

Malware in sbrugna...

EUVD-2017-8337

Malware in sbrugna...

EUVD-2019-6410

Malware in sbrugna...

EUVD-2019-6443

Malware in sbrugna...

EUVD-2019-6465

Malware in sbrugna...

EUVD-2019-3551

Malware in sbrugna...

EUVD-2019-6414

Malware in sbrugna...