Microsoft has fixed a known issue that removed the Copilot Chat and Copilot buttons in the classic Outlook desktop mail client for some Windows users. As explained in an updated support documentAffected users with the Copilot Chat (Basic) license or a Microsoft 365 Copilot (Premium) account no longer saw Copilot buttons in the side navigation … Read more
Microsoft has fixed a known issue that resulted in black screens, desktop loading issues, and Explorer crashes after installing Windows 11 updates released since August. As Microsoft explained last month when it confirmed the issue, affected users experienced several symptoms, most commonly a black screen after logging in, not being able to access their desktop … Read more
Hackers are exploiting stored cross-site scripting (XSS) vulnerabilities in two independent WordPress plugins, Ninja Forms and WPC Product Bundles for WooCommerce, to install backdoors and create fraudulent administrator accounts. Both vulnerabilities were given a high severity rating and require an authenticated session to be exploited. They are tracked as CVE-2026-93836, affecting WPC product bundles for … Read more
Google has temporarily halted its Open Source Software Vulnerability Reward Program (OSS VRP) for product vulnerability submissions, saying a growing number of automated reports, most of which were invalid, prompted the move. The break was announced on X on October 1st. “This pause is due to a significant increase in automated submissions, the vast majority … Read more
A Microsoft SharePoint vulnerability known as CVE-2026-65660 is now being exploited for attacks, about six weeks after Microsoft announced patches and a few days after researchers disclosed technical details. CVE-2026-65660 is a remote code execution vulnerability that was addressed by Microsoft in the August 2026 Patch Tuesday updates. The company’s advisory describes it as a … Read more
D-Link warned customers about a maximum severity vulnerability (CVE-2026-86296) with public proof-of-concept (PoC) exploit code and no patch affecting older DIR-822A dual-band Wi-Fi routers. This vulnerability is due to a stack-based buffer overflow and improper data processing in the DHCP server component and can be exploited without authentication or user interaction. Attackers without valid credentials … Read more