Skip to content
Threat Feed
Subscribe

Product

Authenticator

3 briefs RSS
critical threat

Microsoft September 2026 Patch Tuesday Addresses Two Actively Exploited Zero-Days

Microsoft's September 2026 update cycle addresses 974 vulnerabilities, including two privilege-escalation zero-days actively exploited in the wild and 20 potentially wormable RCE flaws.

exploited Windows +7 vulnerability-management patch-tuesday privilege-escalation
1t 2c
high advisory

CVE-2026-41615 - Microsoft Authenticator Information Disclosure Vulnerability

CVE-2026-41615 describes a vulnerability in Microsoft Authenticator where sensitive information exposure to an unauthorized actor could lead to information disclosure over a network.

Authenticator information-disclosure cve-2026-41615 microsoft
1r 1c
medium advisory

Entra ID User Reported Suspicious Activity

This rule detects suspicious activity reported by users in Microsoft Entra ID, indicating potential account compromise or unauthorized access attempts via social engineering during authentication.

Entra ID +1 entra-id suspicious-activity initial-access credential-access
2r 2t