cisa

2 articles · newest first

Windows Security app showing Microsoft Defender antivirus status on a laptop screen

Microsoft's own antivirus has a hole in it right now — and even Microsoft can't patch it yet

CVE-2026-69414 lets a local attacker walk straight to SYSTEM through Windows Defender itself, there's still no fix nine days after the CVE was assigned, and CISA just started a clock on it.

Priya Nair · Aug 23 · 6 min

A firewall appliance mounted in a server rack, representative of Fortinet FortiOS/FortiProxy edge devices

Software

this ransomware gang doesn't crack your MFA. it just tells the server to say yes

Six government agencies just confirmed a ransomware crew is rewriting authentication files on Fortinet VPN portals so a single fake one-time code logs in every time — MFA included.

Priya Nair · Aug 14 · 6 min