Reimagining the SOC for the agentic era in Microsoft Defender

The physics of cybersecurity are changing. So must the security operations center SOC. Cyberattackers are using agents to automate execution at unprecedented scale. What once required entire teams now requires a single operator and an agent framework. That shift has exposed a hard truth: security...

Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware

A Chinese threat actor codenamed UTA0565 has been observed exploiting the recently disclosed Google Chrome-Microsoft Windows exploit chain as zero-days through fake websites. The attacks, detected on September 3 and 4, 2026, involved the chaining of two vulnerabilities in Chrome CVE-2026-85046,...

PT-2026-97610

Name of the Vulnerable Software and Affected Versions Microsoft Outlook affected versions not specified Description A remote code execution issue exists in Microsoft Outlook. This flaw allows an attacker to execute arbitrary code on the target system. Recommendations Apply the September updates t...

Google Chrome Microsoft Edge DoS

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

WebAppInstalls Component Code Execution

The vulnerability of the WebAppInstalls component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2026-70125: Heap-based Buffer Overflow

Microsoft Office Outlook Remote Code Execution Vulnerability...

Network component Code Execution

The vulnerability of the Network component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

ANGLE Component Code Execution

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Skia Graphic Library DoS

The vulnerability of the Skia graphic library in Google Chrome and Microsoft Edge browsers is related to errors during variable initialization. Exploiting this vulnerability can allow an attacker to cause service interruptions...

Skia Graphic Library DoS

The vulnerability of the Skia graphic library in Google Chrome and Microsoft Edge browsers is related to errors during variable initialization. Exploiting this vulnerability can allow an attacker to cause service interruptions...

Skia Graphic Library Code Execution

The vulnerability of the Skia graphics library in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

KLA91300 ACE vulnerability in Microsoft Office

Arbitrary code execution vulnerability was found in Microsoft Office. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2026-70125 Exploitation Related products Microsoft-Office Microsoft-365 CVE list CVE-2026-70125 unknown Solution Install necessar...

Extensions Component DoS

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...

Ozone Component Code Execution

The vulnerability of the Ozone component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Ozone Component Code Execution

The vulnerability of the Ozone component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

WebAppInstalls Component Code Execution

The vulnerability of the WebAppInstalls component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Password component Code Execution

The vulnerability of the Password component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Google Chrome Microsoft Edge Code Execution

The vulnerability of the File Input component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Google Chrome Microsoft Edge Unauthorized Access

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to a lack of source verification mechanisms. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

WebAudio DoS

The vulnerability of the WebAudio component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...