Geek Feed - Latest IT News & Tech Trends 🚀💻

Microsoft patches Exchange Server zero-day exploited in attacks

June 13, 2026June 13, 2026 geekfeed0Tagged 0day, Code Execution, Cross-site scripting, CVE-2026-42897, Exchange, microsoft, Microsoft Exchange, outlook, Outlook on the web, OWA, patch, Security Update, xss, Zero-Day

Microsoft has patched an actively exploited Exchange Server vulnerability that allows threat actors to execute arbitrary JavaScript code in cross-site scripting (XSS) attacks targeting Outlook Web Access users. This high-severity spoofing vulnerability (CVE-2026-42897) affects Exchange Server 2016, Exchange Server 2019, and Exchange Server Subscription Edition (SE) software and can be exploited by remote attackers with […]

2 mins read

Microsoft: Some Windows PCs fail to install latest monthly updates

June 13, 2026June 13, 2026 geekfeed0Tagged 0x80073712, 0x800f0993, Cumulative Update, Known Issue, microsoft, windows, windows 11, Windows 11 24H2, Windows 11 25H2, windows update

Microsoft warned customers on Tuesday that they may have issues installing the latest monthly updates on some Windows devices that were upgraded to Windows 11 24H2 or 25H2. On affected systems, users will see 0x80073712 or 0x800f0993 errors when trying to install the June 2026 cumulative updates. “A small percentage of devices running Windows 10, […]

3 mins read

Microsoft patches YellowKey, GreenPlasma, MiniPlasma zero-days

June 13, 2026June 13, 2026 geekfeed0Tagged 0day, BitLocker, GreenPlasma, microsoft, MiniPlasma, Nightmare Eclipse, patch, Security Update, windows, Yellow Pages, YellowKey, Zero-Day

On Tuesday, Microsoft patched two zero-day vulnerabilities that let attackers gain SYSTEM privileges on fully patched Windows systems, and a third one that grants access to BitLocker-protected drives. All three security flaws were disclosed last month by a security researcher using the “Nightmare Eclipse” handle in protest over how the Microsoft Security Response Center (MSRC) […]

2 mins read

Ivanti: Max severity Sentry flaw allows code execution as root

June 13, 2026June 13, 2026 geekfeed0Tagged CVE-2026-10520, CVE-2026-10523, Ivanti, Ivanti Sentry, MobileIron Sentry, rce, Remote Code Execution, root

Security software company Ivanti has released patches to address two critical vulnerabilities in its Sentry secure mobile gateway solution, including a maximum-severity flaw that enables remote attackers to execute code with root privileges. Formerly known as MobileIron Sentry, Ivanti Sentry is a security gateway appliance that secures traffic between back-end corporate systems and remote mobile […]

2 mins read

Anthropic rolls out Claude Fable 5, but it’s available for a limited time

June 13, 2026June 13, 2026 geekfeed0Tagged ai, Anthropic, Artificial Intelligence, Claude, Claude Fable, Claude Mythos

Anthropic has begun rolling out a new model called “Fable,” which is based on the same underlying model as Mythos, its most powerful AI model class. Anthropic previously said that it developed a model called “Mythos,” which is a state-of-the-art model that poses security risks to companies around the world. At that time, Anthropic noted […]

3 mins read

Microsoft Defender ‘RoguePlanet’ zero-day grants SYSTEM privileges

June 13, 2026June 13, 2026 geekfeed0Tagged 0day, cybersecurity, Elevation of Privileges, Microsoft Defender, Nightmare Eclipse, vulnerability, Zero-Day

A security researcher has released a new Microsoft Defender zero-day exploit named “RoguePlanet” just hours after Microsoft fixed two previously disclosed flaws during June 2026 Patch Tuesday. The researcher, known as Nightmare Eclipse, says the new vulnerability affects fully patched Windows 10 and Windows 11 devices, allowing attackers to spawn a command prompt with SYSTEM privileges via […]

4 mins read

ServiceNow discloses security incident exposing customer data

June 13, 2026June 13, 2026 geekfeed0Tagged API, data breach, Security Incident, ServiceNow

ServiceNow is warning about a security incident after attackers exploited an unauthenticated access flaw through a vulnerable API endpoint, allowing them to query data from customer instances. The company quietly warned impacted customers through a support bulletin and direct support cases after detecting “anomalous activity” related to the issue. The bulletin, which is hidden behind ServiceNow’s […]

3 mins read

OpenClaw AI agent found falling for phishing attacks, spills user data

June 13, 2026June 13, 2026 geekfeed0Tagged Agentic AI, ai, AI agent, Artificial Intelligence, email, OpenClaw, phishing

Phishing simulation on an OpenClaw email agent with various configuration profiles showed that it was susceptible to tactics commonly used to compromise human users. The OpenClaw open-source AI agent framework allows large language models (LLMs) to interact with real-world systems and perform actions autonomously. It can be used as an email agent for basic reasoning and operations. Researchers […]

3 mins read

SAP fixes critical flaws in NetWeaver and Commerce Cloud

June 13, 2026June 13, 2026 geekfeed0Tagged Authentication Bypass, CVE-2026-27671, CVE-2026-44748, Memory, NetWeaver, patch, SAP, vulnerability

SAP has released fixes for 15 vulnerabilities as part of its June 2026 Security Patch package, including four critical-severity flaws affecting SAP NetWeaver and SAP Commerce Cloud. NetWeaver is SAP’s core application platform and middleware stack that provides the foundation for many SAP business applications, including ERP systems, handling functions such as application serving, integration, […]

2 mins read

Microsoft June 2026 Patch Tuesday fixes 6 zero-days, 200 flaws

June 13, 2026June 13, 2026 geekfeed0Tagged microsoft, Patch Tuesday, Security Update, vulnerability, windows, windows update

Today is Microsoft’s June 2026 Patch Tuesday, with security updates for 200 flaws, including five publicly disclosed zero-day vulnerabilities and one actively exploited in attacks. This Patch Tuesday addresses 33 “Critical” vulnerabilities, 28 of which are remote code execution, 4 are elevation of privilege, and 1 is an information disclosure flaw. The number of bugs in […]

23 mins read