This week’s roundup covers Microsoft cloud patches, a high-severity Exchange exploit, and a Dropbox account compromise tied to Lenovo’s email verification process. It also highlights the Knight Office phishing kit, malicious code served through Coder’s module registry, and the charging of Searzhudin Tamirlanovich Aktulaev for delivering malware to freelance users. #Microsoft…

An anonymous researcher using the Nightmare Eclipse handle released FalconFlank, a CrowdStrike Falcon zero-day that can escalate privileges to SYSTEM on fully updated Windows 11 and Windows Server systems. CrowdStrike says it is investigating and advises customers to disable the Microsoft Office File Suspicious Macro Removal setting while it reviews the issue. #FalconFlank #NightmareEclipse #CrowdStrike #Windows11 #WindowsServer

Attackers are actively targeting CVE-2026-19490, a critical Citrix NetScaler authentication bypass flaw, after a credible proof-of-concept exploit was published online. Citrix and Belgium’s NCC-BE have urged administrators to patch vulnerable NetScaler ADC and NetScaler Gateway appliances immediately, as evidence points to exploitation attempts but not yet confirmed compromise. #CVE-2026-19490 #Citrix #NetScaler #NCC-BE

Multiple lawsuits and class-action investigations have been filed after IDScan was linked to a dark-web service advertising access to more than 153 million driver’s license scans and other identity documents. The FBI’s New Orleans office is reportedly investigating the incident, while questions remain about whether IDScan’s systems were breached and how many people were affected. #IDScan #Nexus #FBI #Krebs

Google has patched 12 Chrome vulnerabilities, including CVE-2026-85046, a zero-day that was already being exploited in the wild. The flaw is a high-severity type confusion bug in Chrome’s V8 engine that could let a remote attacker run arbitrary code through a crafted HTML page. #Google #Chrome #CVE-2026-85046 #V8 #SalvatoreGulizia

Synology has released ActiveProtect Manager 2.0 for its ActiveProtect data protection appliances, expanding support to more platforms and enabling cross-platform recovery for faster disaster recovery and workload migration. The update also strengthens security with volume-level encryption, while upcoming APM 2.1 features will add AI-driven anomaly detection and malware scanning using tools like Microsoft Defender, Bitdefender, and ESET. #Synology #ActiveProtectManager #AmazonEC2 #AzureVM #ProxmoxVE #NutanixAHV #GoogleWorkspace #AzureBlobStorage #MicrosoftDefender #Bitdefender #ESET

AI is making technical security analysis faster and more routine, but the right response still depends on human judgment and environmental context. Security leaders should grant autonomy based on reversibility and blast radius, while tracking how analysts actually review AI recommendations and guarding against confident false negatives. #CISO #AI #reversibility #blastradius

Catch has raised $5 million to expand its AI executive assistant that handles scheduling, travel, follow-ups, and sensitive communications with human-in-the-loop decision-making. The company says its secure, permission-based design lets leaders delegate admin work safely while keeping control over access and approvals. #Catch #EntréeCapital #Pitango #Seedcamp #FactorialCapital…

Cyera says PostgreSQL versions from 9.4 through 18 are affected by CVE-2026-6471, also called PostGREShell, a severe flaw that can let low-privileged attackers achieve remote code execution, privilege escalation, and persistent superuser access. The issue is patched in PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24, and organizations should update immediately and…