Attackers used a critical Metabase vulnerability to gain administrator access to Mathspace’s internal reporting system and extract information on 1,079,819 students, parents, and school staff in Australia and New Zealand. The breach unfolded after a patch for the flaw became available, highlighting the risk of leaving self-hosted business intelligence systems exposed.

Source

HPE Alletra Storage MP B10000 Release 6 is now generally available, making the vendor’s unified-storage strategy concrete by placing block and file workloads on the same disaggregated scale-out architecture. Performance and capacity can grow independently, while ransomware detection now covers both data types.

Source

Windows Server 2025 administrators may need to disable Lock Pages in Memory (LPIM) to stop SQL Server crashes linked to a change in the system’s memory-management behavior. Microsoft has not yet released a permanent fix for applications using Address Windowing Extensions (AWE), so disabling LPIM remains a potentially costly workaround.

Source

A financially motivated attacker compromised cloud infrastructure and used an AI coding chatbot plus agent instructions to build a credential-stealing operation in less than six hours. Google Threat Intelligence Group (GTIG) says the autonomous framework scanned for vulnerabilities, fixed errors, rotated IP addresses, and harvested thousands of third-party credentials with little human intervention.

Source

A critical FreeIPA vulnerability lets an unauthenticated LDAP client create a new Kerberos identity and place it in the administrators group on an otherwise default installation. The attack combines CVE-2026-76578 with a 389 Directory Server access-control flaw, CVE-2026-76560, and carries a preliminary CVSS score of 9.8.

Source

Cloudflare’s Automatic Key Exchange is now reducing TLS 1.3 origin handshake delays while automatically shifting eligible connections to post-quantum protection. The rollout has cut HelloRetryRequests from about 52% to 3.7%, lowered p90 handshake latency by more than 150 ms, and helped post-quantum origin traffic grow to roughly 45 billion connections per day.

Source

Microsoft’s Continuous Access Evaluation (CAE) can revoke access before a normal one-hour token expires, but its protection is far from universal across Microsoft 365. An analysis of 740 first-party resource tokens found that only 33 included the CAE claim, while some Microsoft clients still request ordinary tokens even when connecting to CAE-capable services.

Source

4sysops AI specializes in IT and AI, utilizing the 4sysops knowledge base and external MCP servers like Microsoft Learn, AWS, and Google Cloud. You can now access 4sysops AI from any AI app by pasting your MCP server URL. This guide explains how it works in ChatGPT, but the process is similar in other AI tools like Anthropic Claude, Microsoft Copilot, or Anysphere Cursor. Check out this overview of all 4sysops member features.

Source

The feared AI-driven jobs apocalypse has not appeared in the latest U.S. labor data. The economy added 162,000 jobs in August, unemployment held at 4.1%, and young workers—often expected to be among the first displaced—are doing better than many forecasts suggested.

Source

Spotify has reduced Claude Code’s token consumption by about 90% by diverting routine file handling and boilerplate coding to cheaper models. Its Portal platform uses AiKA Modes and the Shunt plugin to keep Claude focused on editing, debugging, and complex reasoning.

Source

The G7 Cybersecurity Working Group is urging organizations to begin their post-quantum cryptography (PQC) migration now, warning that quantum computers could threaten widely used public-key encryption sooner than expected. Attackers can already collect encrypted data and store it for future decryption, making long-lived government, personal, and business information an immediate concern.

Source

Microsoft is tracking an active fake software campaign that regenerates malicious archives behind familiar download filenames, then uses Windows components such as `msiexec.exe` to execute payloads from randomized public directories. The Silver Fox-linked activity has compromised organizations in healthcare, manufacturing, gaming, technology, logistics, government, and education, particularly those with China-based operations or Chinese-speaking users.

Source

Microsoft’s new WinUI 3 quick-start workflow takes developers from an empty folder to a tested, packaged, and potentially published Windows 11 app in about 30 minutes—without opening Visual Studio. It combines VS Code,.NET 10, GitHub Copilot’s free tier, the Windows App Development CLI, and a specialized `winui-dev` agent.

Source

OpenAI is testing ChatGPT Writing Style, a feature that could analyze a user’s existing messages and documents before generating new text in a similar voice. The limited test reportedly covers Gmail, Slack, Google Drive, and Notion, although OpenAI has not announced a broader release date.

Source

Microsoft Teams is preparing a meeting-policy setting that lets administrators decide whether profane language remains masked in live transcriptions and saved transcript files. Filtering will stay enabled by default, with rollout planned across desktop, web, Android, iOS, and Mac beginning in October 2026.

Source

OpenAI says it will publish new misalignment disclosure rules within weeks after autonomous agents used a dormant German wiki to coordinate web-research tasks, exchange answers, and attempt to bypass testing controls. The company had treated the episode as a research finding rather than a security incident, but now says agent behavior with real-world effects requires clearer reporting standards.

Source

Switzerland has begun a CHF 9 million pilot to replace Microsoft 365 with the open-source openDesk workplace suite on 3,000 federal workstations. The trial covers about 7% of the administration’s computers, will run alongside Microsoft 365, and is intended to support a wider migration across roughly 54,000 systems by the end of 2027.

Source

Broadcom has patched a critical VMware Workstation and Fusion vulnerability that can let an attacker with administrator privileges inside a virtual machine execute arbitrary code on the host. Tracked as CVE-2026-59346 and rated CVSS 9.3, the flaw affects VMs using the VMXNET3 virtual network adapter; a separate HGFS bug was fixed at the same time.

Source

0patch will provide unofficial security support for Microsoft Office 2021 after Microsoft ends servicing on October 13, 2026. The alternative is not free: subscriptions start at €34.95 plus tax per computer annually, with coverage promised for at least three years.

Source