Security, explained.

Identity & accessEXPLAINER · 3 MIN READ

SharePoint CVE-2026-69465: when a signed-in user has too much access

Microsoft’s missing-authorization fix needs more than a package install. Review the affected SharePoint edition, Workflow Manager prerequisite and upgrade status across the farm.

Threat awarenessEXPLAINER · 3 MIN READ

Apple ImageIO CVE-2026-65346: the risk inside image decoding

Apple fixed an integer overflow in ImageIO. Here’s how image-size calculations can go wrong, what Apple has disclosed and why the operating-system update matters.

Threat awarenessEXPLAINER · 6 MIN READ

Why a vendor patch date and a CISA catalog date can differ

Four Apple, Google and Microsoft cases show why patch announcements and known-exploitation records belong in the same workflow, without treating either date as the start of an attack.

Defense & recoveryEXPLAINER · 5 MIN READ

Android’s September patches: the adbd flaw and the update fields to check

The September bulletin includes a race-related use-after-free in adbd. Understanding the flaw also means separating Android versions, security patch levels and Google Play system updates.

Defense & recoveryEXPLAINER · 5 MIN READ

Two exploited Windows bugs, two routes to SYSTEM privileges

Microsoft’s September fixes cover unsafe file-link handling in Windows Update Stack and heap corruption in ALPC. Both can turn local access into a much more serious compromise.

Identity & accessEXPLAINER · 5 MIN READ

Apple’s Screen Sharing fix: CVE-2026-65400 and unauthenticated access

Apple repaired an authentication-state flaw in macOS Screen Sharing. Check the affected release branch, who can reach the service and whether older access needs investigation.

Threat awarenessEXPLAINER · 5 MIN READ

Chrome CVE-2026-85046: what the exploited V8 bug tells us

Google confirmed exploitation of a V8 type-confusion flaw. The advisory identifies the fix, but leaves the underlying failure and the rest of any exploit chain undisclosed.

Defense & recoveryCHECKLIST · 5 MIN READ

An incident response plan your team can actually use

Decide who can act, what evidence to preserve and what has to be checked before service resumes. Then rehearse the plan while the systems are still working.

Identity & accessEXPLAINER · 5 MIN READ

Authenticator codes or passkeys: what changes when you sign in?

Both can improve on a password alone, but they protect against different attacks. Understand TOTP secrets, WebAuthn origin checks, recovery and the sessions left open after login.