Threat actors are impersonating IT support on Microsoft Teams to gain remote control of workstations and exploit AD CS for privileged access.
Security researchers have identified a 'confused deputy' vulnerability in Google Kubernetes Config Connector that could allow an attacker to seize control of an entire Google Cloud organisation.
cPanel has released updates for vulnerabilities in its CalDAV and WP Toolkit services that could allow hosting account holders to gain root access or modify other users' databases.
A critical flaw in Parallels Desktop allows non-admin Mac users to escalate privileges to root, but Intel-based Mac users may remain unpatched.
Google has issued security updates for Pixel devices to address a high-severity zero-day vulnerability in the cellular modem component that was being actively exploited.
