What has changed?

Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users' Mailboxes

The out-of-band update fixes an authorization weakness that allows an already authenticated attacker to access other users' mailboxes and thereby escalate privileges; there is no evidence of active exploitation so far.

Storm-3168: Agentic-driven cloud attacks using compromised service principals

The report shows that automated agents use compromised service principals for Azure resource destruction and credential collection , an attack path beyond classic endpoint ransomware.

[UPDATE] Linux Kernel: Multiple Vulnerabilities

The report summarizes multiple Linux kernel vulnerabilities without naming specific CVEs; details of the underlying CVEs are required to assess exploitability.

GNU libc: Multiple vulnerabilities allow manipulation of DNS responses

The update suggests that previous patches were incomplete or new vulnerabilities were discovered.

[UPDATE] GNU libc: Vulnerability Allows Denial of Service

The BSI report updates a warning about a DoS vulnerability in GNU libc without providing new CVE or exploit details.

[UPDATE] sudo: Vulnerability allows code execution

Google Chrome: Multiple Vulnerabilities

Kothamine malware uses Tailscale’s tailcat to evade network detection

Kothamine Agent is a new RAT that abuses Tailscale's tailcat for encrypted C2 communication, thereby evading conventional network detection.

Microsoft Edge: Multiple vulnerabilities allow information disclosure and spoofing attacks

The report describes general vulnerabilities in Microsoft Edge without specific CVE or exploit details, making prioritization difficult.