Threat Watch– active
All incidents
More on Threat Watch
More Microsoft incidents
- CVE-2026-97631: TianoCore EDK II UEFI PXE driver — 16-year-old buffer overflow allows pre-OS code execution during network boot Critical · Patch now
- GitHub: stolen tokens planted secret-dumping workflows in 13,500+ branches across 850+ accounts (Gheist) High · Supply chain
- APT41 BlackX UEFI bootkit bypasses Secure Boot via unrevoked Baton Drop certificate (CVE-2022-21894) High · Patch now
- Microsoft: VM Inspector for Azure Virtual Machines elevation of privilege via link following (CVE-2026-110063) Critical · Patch now
- Azure Kubernetes Configuration Service: missing authentication allows unauthorized attackers to elevate privileges over a network (CVE-2026-83938) Critical · Patch now
- Microsoft Entra Application Proxy: elevation of privilege via improper authentication (CVE-2026-97785) Critical · Patch now
Browse
Helix Cyber
Is your stack exposed? Get it tested.
The incidents above hit someone else first. A Helix pentest finds what an attacker would use against your web apps, APIs and cloud. A second agent verifies each finding, and retests run from the same portal.