CVE-2026-69836 2

Vulnerability (CVE)

Microsoft Patches Severe Entra ID Flaw (CVSS 10.0) Allowing Remote Code Execution

Microsoft disclosed CVE-2026-69836, a CVSS 10.0 deserialization-of-untrusted-data remote code execution flaw in Entra ID, crediting principal security engineer Robert Fitzpatrick for finding and reporting it. The bulletin initially marked the flaw as...

Identity & Access Management

⚡ Weekly Recap: AI-Powered PLC Attacks, Git Lab Attacks, Stripe Key Leaks and More

Cyber Risks The Hacker News

U.S. government agencies warned that threat actors are using AI to write exploit scripts against internet-exposed Siemens S7 Series PLCs used in water, energy, and manufacturing, finding targets through legitimate scanning services such as Censys and...

Threat Actors & Nation-State