Microsoft Authenticator Flaw Let Android Apps Steal Tokens
Microsoft patched a flaw in Authenticator for Android that let apps with no permissions pose as trusted apps like Teams and collect work account sign-in tokens.
Exam voucher blog
Published updates and explanations for certification candidates.
HTTP2Shell Brotli Flaw Triggers Emergency Patches
A critical Brotli decoder flaw called HTTP2Shell affects Node.js and has already triggered emergency patches. Here is what we know, what we don't, and the steps to take today.
CVE-2026-109619: PHP Vulnerability, What to Do Now
CVE-2026-109619 is a stale internal request-state bug in PHP that allows unauthenticated remote code execution. CISA added it to the Known Exploited Vulnerabilities catalog on 2026-10-26, with a federal remediation due date of 2026-10-29.
Microsoft Emergency .NET Patches: Critical Brotli Flaw
Microsoft has released emergency .NET security updates for a critical Brotli-related flaw tracked as Broccoli2Shell, Node2Shell and HTTP2Shell. Here is who is affected, what to patch, and what IT learners should take from it.